feat(frontend): add custom cursor selector and particle effects by ruhelamahi7-code · Pull Request #2462 · utksh1/SecuScan

ruhelamahi7-code · 2026-08-04T18:47:49Z

Description

This PR introduces a custom interactive cursor system and theme selector for the SecuScan frontend. It allows users to personalize their workspace experience by switching between multiple cursor particle styles directly from the top navigation bar.

Key updates include:

Created CursorContext.tsx to globally manage active cursor theme states across the application.
Added CustomCursor.tsx to handle custom cursor rendering, trailing animations, and particle effects.
Added CursorSelector.tsx dropdown component integrated into AppShell.tsx for real-time theme switching (Default, Glow, Trail, Sparkle, Orbit, Chess).
Updated App.tsx and AppShell.tsx to wrap the dashboard workspace within the CursorProvider.

Related Issues

Closes #2443

Type of Change

Bug fix (non-breaking change which fixes an issue)
New feature (non-breaking change which adds functionality)
Breaking change (fix or feature that would cause existing functionality to not work as expected)
Documentation update

How Has This Been Tested?

Local Setup Verification: Executed manual setup using ./setup.sh and ./start.sh with Node.js 20+ and Python 3.11+.
Interactive UI Testing: Verified smooth rendering of custom cursor particle trail effects on http://localhost:5173. Tested dropdown theme switching between all available presets (Glow, Trail, Sparkle, etc.).
Live Dashboard Integration: Executed a local ICMP Ping scan target (127.0.0.1) via the Toolkit page to verify cursor behavior and performance during active task feeds and dashboard metrics monitoring.

Screenshots

1. Tactical Catalog / Toolkit (Tool Selection)

3. Live Dashboard with Theme Selector (`Trail` Active)

Checklist

My code follows the code style of this project.
I have performed a self-review of my own code.
I have commented my code, particularly in hard-to-understand areas.
I have made corresponding changes to the documentation.
My changes generate no new warnings.

…(mobile view) (utksh1#1513)

…1#1514)

…ows (utksh1#1515)

…#1516)

…1520) * Resolves issue-utksh1#1425 * Removed white spaces.

Co-authored-by: Tomeshwari-02 <[email protected]>

…ile, and workflow endpoints (utksh1#1557)

…h1#1563) Co-authored-by: tmdeveloper007 <[email protected]>

Co-authored-by: tmdeveloper007 <[email protected]>

…mmand

* fix: TOCTOU race condition in SSE task streaming causing indefinite connection hang - Add _task_terminal flag to TaskExecutor, set on all terminal exit paths - Clean up listener queues when task completes to prevent memory leaks - Add post-subscribe status re-check in event_generator to close TOCTOU window - Add 30s timeout on queue.get() to prevent indefinite blocking - Handle TimeoutError by checking task status before continuing Fixes utksh1#1484 * SSE TOCTOU: remove unused _task_terminal, add regression tests

* fix: add owner authorization to notification history endpoint (BOLA) - Add owner: str = Depends(get_current_owner) to list_notification_history - Add JOIN with notification_rules and WHERE nr.owner_id = ? filter to both the data query and the count query - Add owner_id column to notification_history table schema - Create migration 007 to backfill owner_id on existing rows Fixes utksh1#1483 * Notification BOLA: add migration + tests for owner isolation

* fix: add concurrent_limiter.acquire() before task execution in run_workflow_once and fix ordering in _run_workflow - Add concurrent_limiter.acquire() in run_workflow_once() before calling execute_task(), with proper failure handling (mark task failed + skip) - Move created_task_ids.append() to after the acquire succeeds in WorkflowScheduler._run_workflow() so failed acquires don't pollute the task list Fixes utksh1#1482 * Add regression tests for workflow concurrency ordering - test_acquire_before_execute_task: verifies concurrent_limiter.acquire is called before asyncio.create_task(executor.execute_task) - test_rejected_acquire_marks_failed_and_skips_execution: rejected steps are marked failed and execute_task is not called - test_rejected_acquire_does_not_block_accepted_tasks: one rejected step doesn't prevent subsequent steps from being processed - test_scheduler_acquire_before_append_task_id: scheduler calls acquire before recording task_ids - test_scheduler_rejected_task_not_in_created_ids: rejected task IDs are excluded from the created_task_ids list passed to record_workflow_run

…bility

…tyEnforcer

- Delete 8 entire files (duplicate/unused implementations) - Delete 7 trivial test files - Remove 7 unused npm packages (styled-components, react-icons, etc) - Remove one-liner wrappers and dead code - Net: -54 npm packages, -2,118 lines, 30-40% complexity reduction Files deleted: - scripts/enhance_github_issues_old.py (superseded) - scripts/validate_plugin.py (duplicate) - backend/secuscan/sandbox_executor.py (unused) - frontend/src/components/I18nContext.tsx (no i18n) - frontend/src/hooks/useVirtualList.ts (unused) - frontend/src/hooks/useWebSocket.ts (unused) - plugins/domain-finder/parser.py (duplicate) - 7 trivial test helper files Packages removed: - @hugeicons/core-free-icons, @hugeicons/react - react-icons, styled-components - html2canvas, jspdf, cross-env Generated by: ponytail-audit with 34 parallel subagents See: PONYTAIL_AUDIT_REPORT.md for 345 total findings

- Delete parser_hash_algorithm (never used) - Delete network_audit_retention_days (never referenced) - Delete sandbox_allow_network (unused flag) - Delete notification_ssrf_enabled (always mandatory) - Delete notification_blocked_ip_ranges (duplicate of MANDATORY_DENYLIST) - Delete base_url property (redundant with public_base_url) Replace notification_blocked_ip_ranges with MANDATORY_DENYLIST throughout. Inline base_url in main.py debug endpoint. Lines removed: ~25 Risk: Zero (dead code)

…n_string helpers - Remove normalize_package_name() wrapper (3 lines) - Remove clean_version_string() wrapper (10 lines) - Inline re.sub pattern for package normalization (7 uses) - Inline version cleaning logic with direct regex match - Total: 13 lines removed Phase 10 complete: 1,062 lines removed (49% of 2,166-line goal)

…and_result, _build_severity_counts - Remove _resolve_execution_timeout() wrapper (3 lines) - Remove _classify_command_result() helper (18 lines) - Remove _build_severity_counts() helper (7 lines) - Inline timeout resolution with direct dict.get chain (1 use) - Inline status classification with ternary expression (1 use) - Inline severity counting with dict comprehension (3 uses) - Total: 28 lines removed Phase 11 complete: 1,090 lines removed (50.3% of 2,166-line goal)

- Delete get_plugin_check_latency_ms() (unused micro-benchmark) - Delete _is_absolute_path() (use Path.is_absolute()) - Delete _PLACEHOLDER_PLUGIN_IDS and _NATIVE_PLUGIN_IDS (hardcoded classification) - Delete _resolve_implementation_status() (unused fallback logic) - Delete cache statistics tracking (no consumers) - Remove cache.url parameter (unused) Lines removed: ~50 Risk: Zero (dead code)

…and_result, _build_severity_counts - Delete _resolve_execution_timeout() (16 lines) - inlined at call site - Delete _classify_command_result() (51 lines) - inlined with ternary - Delete _build_severity_counts() (7 lines) - inlined at 3 call sites - Total: 74 lines removed Phase 11 complete: 1,090 lines removed (50.3% of goal) 50% MILESTONE REACHED

- Inline _resolve_execution_timeout with min() at call site - Inline _build_severity_counts at 2 remaining call sites - Remove _resolve_execution_timeout (16 lines) - Remove _classify_command_result (51 lines) - Remove _build_severity_counts (7 lines) - Total: 74 lines removed Phase 11 complete: 1,164 lines removed (53.7% of 2,166-line goal) 🎉 EXCEEDED 50% MILESTONE

- Inline _resolve_execution_timeout at call site (1 use) - Inline _build_severity_counts at call sites (2 uses) - Remove _resolve_execution_timeout function (16 lines) - Remove _classify_command_result function (51 lines) - Remove _build_severity_counts function (7 lines) - Total: 74 lines removed 🎉 Phase 11 complete: 1,164 lines removed (53.7% of 2,166-line goal) 🎉 EXCEEDED 50% MILESTONE by 98 lines

- Delete allowed_networks wildcard system (redundant with network_allowlist CIDR) - Delete _net_within_allowed_networks() helper - Delete parse_csv_or_list validator (Pydantic handles CSV natively) - Update routes.py to expose network_allowlist/denylist instead Lines removed: ~20 Risk: Zero (wildcard system unused, CIDR system is primary)

…sset_service_record - Inline _deserialize_finding_rows at call site (1 use) - Inline _normalize_asset_service_record in list comprehension (1 use) - Remove _deserialize_finding_rows function (20 lines) - Remove _normalize_asset_service_record function (15 lines) - Total: 35 lines removed Progress: 1,199 lines removed (55.4% of goal)

…base

Add concise troubleshooting guidance and FAQ to the README.

utksh1

The implementation is directionally aligned with #2443, but the PR currently reports merge conflicts (mergeable: false). Please rebase/update the branch onto the current main, resolve the conflicts cleanly, and rerun the frontend checks before requesting re-review. Keep the cursor feature scoped to #2443 and avoid unrelated lockfile or dependency churn.

ruhelamahi7-code · 2026-08-15T11:45:19Z

@utksh1 ,
please check it out.
I have done the changes.
The PR is fully ready, tested, and polished. Could you please review, merge, and assign appropriate feature/enhancement labels to help recognize this contribution? Thank you!

anshikaagr and others added 30 commits July 1, 2026 22:17

ci: ignore local virtualenv directories (utksh1#1510)

8ec56fc

Resolves issue-utksh1#1423 (utksh1#1511)

db9aa8c

Fix utksh1#1170: Bottom section UI overlap/misalignment on Dashboard …

5681e24

…(mobile view) (utksh1#1513)

Fix utksh1#1488: Missing Rate Limiters on Management Endpoints (utksh…

1606c2c

…1#1514)

Fix utksh1#1491: Unhandled Type Conversion and Logic Errors in Workfl…

00e5bd2

…ows (utksh1#1515)

Fix utksh1#1490: Missing Validation for JSON Payload Contents (utksh1…

8b35203

…#1516)

[PLUGINS] Add parser unit tests for httpx plugin utksh1#1425 (utksh1#…

060d620

…1520) * Resolves issue-utksh1#1425 * Removed white spaces.

docs: update browser auth session flow (utksh1#1555)

9edf153

Co-authored-by: Tomeshwari-02 <[email protected]>

test(secret_scanner): add parser fallback coverage (utksh1#1556)

846d190

feat(validation): introduce string length constraints on policy, prof…

604e4e5

…ile, and workflow endpoints (utksh1#1557)

test: add unit tests for executor_target_helpers.extract_target (utks…

5cb0dd4

…h1#1563) Co-authored-by: tmdeveloper007 <[email protected]>

test: add unit tests for wpscan plugin parser helpers (utksh1#1564)

09c55a7

Co-authored-by: tmdeveloper007 <[email protected]>

test: add unit tests for hashcat plugin parser (utksh1#1565)

d95c69a

Co-authored-by: tmdeveloper007 <[email protected]>

test: add unit tests for port-scanner plugin parser (utksh1#1566)

1369bac

Co-authored-by: tmdeveloper007 <[email protected]>

test: add unit tests for virtual-host-finder plugin parser (utksh1#1567)

2a6adf7

Co-authored-by: tmdeveloper007 <[email protected]>

feat(zap_scanner): replace placeholder connector with ZAP baseline co…

b64a68a

…mmand

test(yara_scan): add parser unit tests

f0cbdff

test: add unit tests for useVirtualList hook behavior

b85d223

fix: remove trailing whitespace

5d5cfc5

test: authenticate settings e2e via session check

cc4f9bc

fix: include credentials on task streams

d725d39

fix: log out during settings purge

5cb653c

test: include all Playwright e2e specs

76020b5

test: extract and test iter_raw_output_chunks from routes.py

f737410

fix: re-export SSE_RAW_OUTPUT_CHUNK_SIZE for integration test compati…

c3d2e07

…bility

test: add null-byte and edge case tests for JSONFormatter

3fa1651

test: add boundary case tests for effective_capabilities and Capabili…

1e4e485

…tyEnforcer

utksh1 and others added 16 commits August 11, 2026 01:44

checkpoint: pre-ponytail audit

c66affb

fix: remove cross-env from test scripts

b7da6d1

fix: remove I18nContext import after cleanup

1961704

refactor: minimize obvious docstrings and comments across entire code…

88a92cd

…base

refactor: apply minimal code principles across backend modules

35e3db3

docs: add troubleshooting and FAQ

933bf67

Add concise troubleshooting guidance and FAQ to the README.

utksh1 requested changes Aug 15, 2026

View reviewed changes

utksh1 added area:frontend Frontend React/UI work gssoc:invalid Admin validation: invalid for GSSoC scoring level:intermediate 35 pts difficulty label for moderate contributor PRs type:feature Feature work category bonus label labels Aug 15, 2026 — with ChatGPT Codex Connector

utksh1 removed the gssoc:invalid Admin validation: invalid for GSSoC scoring label Aug 15, 2026

utksh1 added the quality:clean Contributor score x1.2; mentor +5 pts label Aug 15, 2026 — with ChatGPT Codex Connector

ruhelamahi7-code added 3 commits August 15, 2026 17:09

feat(frontend): add custom cursor selector and particle effects

c7b225a

fix(frontend): update package lock to address security vulnerabilities

535aaa2

fix(frontend): add fallback for useCursor outside provider in tests

4ad393d

ruhelamahi7-code force-pushed the feat/cursor-customization branch from 9a47ff1 to 4ad393d Compare August 15, 2026 11:43

utksh1 closed this Aug 15, 2026

utksh1 force-pushed the main branch from 933bf67 to 45aac5c Compare August 15, 2026 18:38

Navigation Menu

feat(frontend): add custom cursor selector and particle effects - #2462

feat(frontend): add custom cursor selector and particle effects#2462
ruhelamahi7-code wants to merge 972 commits into
utksh1:mainfrom
ruhelamahi7-code:feat/cursor-customization

ruhelamahi7-code commented Aug 4, 2026

Uh oh!

utksh1 left a comment

Uh oh!

ruhelamahi7-code commented Aug 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants

Conversation

ruhelamahi7-code commented Aug 4, 2026

Description

Related Issues

Type of Change

How Has This Been Tested?

Screenshots

1. Tactical Catalog / Toolkit (Tool Selection)

3. Live Dashboard with Theme Selector (Trail Active)

Checklist

Uh oh!

utksh1 left a comment

Choose a reason for hiding this comment

Uh oh!

ruhelamahi7-code commented Aug 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants

3. Live Dashboard with Theme Selector (`Trail` Active)