100 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
ilia	3867e102ea	Sprint C#12: arrow-key prev/next on Identify face queue.	2026-08-04 22:03:35 -04:00
ilia	d1b25a3bab	Merge pull request 'Sprint B: mobile gallery UX' (#83) from sprint-b-mobile-ux into master	2026-08-04 21:02:59 -05:00
ilia	69fd9a2fc8	Docs: Sprint B mobile gallery UX.	2026-08-04 21:58:24 -04:00
ilia	610a70d228	Sprint B: mobile filters, touch actions, skeleton grid, progressive viewer.	2026-08-04 21:58:17 -04:00
ilia	834c14cb52	Merge pull request 'Sprint A: match-all filters, slim payloads, DEV next start' (#82) from sprint-a-ux-trust-speed into master	2026-08-04 20:57:45 -05:00
ilia	37cb6cdf35	ci: re-run after DEV viewer redeploy	2026-08-04 21:54:17 -04:00
ilia	6917cc8407	Docs: Sprint A UX (match-all, slim payloads, deploy-viewer).	2026-08-04 21:48:43 -04:00
ilia	15633a1d37	Switch viewer PM2 template to next start and add deploy-viewer.sh. ... DEV should build once then run production Next.js instead of long-lived next dev.	2026-08-04 21:48:25 -04:00
ilia	181741e25a	Slim gallery face payloads for home SSR and search API. ... Grid only needs location + person names; drop landmarks/pose/detector fields.	2026-08-04 21:48:25 -04:00
ilia	d1151207ca	Fix match-all people/tags filters in gallery search API. ... Raw SQL uses GROUP BY + HAVING for peopleMode/tagsMode=all; add unit tests.	2026-08-04 21:48:25 -04:00
ilia	5b00f3a3ab	Merge pull request 'Fix sidebar contrast and gallery scroll restore' (#81) from fix/sidebar-contrast-scroll-restore into master	2026-08-04 20:25:59 -05:00
ilia	212406187f	Capture gallery scrollY at photo click before Next resets it.	2026-08-04 21:24:34 -04:00
ilia	1415b0efbd	Fix filter sidebar contrast and restore gallery scroll after photo close. ... Labels used text-secondary (a background token); switch to sidebar foreground. Keep lazy-loaded photos and freeze/restore scrollY when the modal opens.	2026-08-04 21:20:25 -04:00
ilia	8b675ae7bd	Merge pull request 'Fix Identify Tab and watermarked thumbnails' (#80) from fix/identify-tab-and-watermark-thumbs into master	2026-08-04 15:21:12 -05:00
ilia	6d01976811	Fix Identify Tab field order and watermarked thumbnail composites. ... Tab/Enter stay inside the person form; thumbs size watermarks to the resized image so sharp.composite no longer fails.	2026-08-04 14:55:13 -04:00
ilia	9bbf0015a9	Merge pull request 'Apply Chabad Blue theme (light + inverted dark)' (#79) from feature/chabad-blue-theme into master	2026-08-04 13:47:57 -05:00
ilia	472c800948	Keep Auto-Match Prev/Next fixed and add match-list filters. ... Constrain panel height so bottom nav matches top Prev/Next; filter by similarity, quality, selection, and sort.	2026-08-04 14:42:37 -04:00
ilia	10cbc9330b	Surface select-all-on-screen controls on Approve Identified. ... Toolbar buttons plus Approve-column header checkboxes for all rows on screen.	2026-08-04 14:34:27 -04:00
ilia	60a767bd65	Stack Identify person fields so Tab moves down, not sideways. ... Single-column layout for create-person inputs; Enter also advances to the next field.	2026-08-04 14:32:32 -04:00
ilia	cd74c045f1	Apply Chabad Blue theme with inverted dark mode. ... Site uses navy/white/quiet-gold tokens and Heebo + Rubik; dark mode is the inverted Chabad Blue canvas.	2026-08-04 14:30:39 -04:00
ilia	27e446a91a	Merge pull request 'Style picker: 12 directions + full page mockups' (#77) from feature/styles-picker-page-mockups into master	2026-08-04 13:02:08 -05:00
ilia	cadf94f4c1	Expand style picker: 12 directions with per-page mockups. ... Add Matchmaker Arcade, Parade Mosaic, and Orbit Kin; show Home, Photo, Search, Identify, Upload, and Login for each style.	2026-08-04 13:57:26 -04:00
ilia	70f89ae7ad	Merge pull request 'Fix dark-mode JRCC logo (white + transparent)' (#76) from fix/jrcc-dark-logo-transparent into master	2026-08-04 12:51:54 -05:00
ilia	366072fb92	Fix dark-mode JRCC logo: white ink on transparent background. ... The previous dark asset was opaque white-boxed grayscale, so it showed as a white rectangle on dark headers.	2026-08-04 13:15:43 -04:00
ilia	669bb83d16	Merge pull request 'JRCC logos (light/dark) + watermark + 9-style picker' (#75) from feature/jrcc-brand-styles into master	2026-08-04 12:07:57 -05:00
ilia	aee2add5cd	Allow brand PNGs to be tracked despite *.png gitignore.	2026-08-04 12:42:11 -04:00
ilia	9ba8e7a214	Add JRCC light/dark logos, watermark, and 9-style picker ... Use bilingual classic mark for light headers and white/blue-gold for dark, replace JAM watermark with JRCC overlay, and ship /styles so we can pick a redesign direction.	2026-08-04 12:41:32 -04:00
ilia	4f628a8e53	Merge pull request 'Person contact fields, approve bulk select, pending-queue digest' (#74) from feature/person-contact-pending-digest into master	2026-08-04 11:27:34 -05:00
ilia	c64a97d147	Add person email/phone, approve bulk select, and pending-queue digest ... Capture optional contact fields on identify/approve, add Select All and Approve Next 10 on User Identified Faces, and email admins when the pending queue grows (ADMIN_NOTIFY_EMAIL via existing noreply SMTP).	2026-08-04 12:20:39 -04:00
ilia	91fbc3f6e6	Merge pull request 'Add MIT LICENSE' (#73) from chore/add-license into master	2026-07-26 15:52:17 -05:00
ilia	8ab4d33cef	Add MIT LICENSE	2026-07-26 15:46:28 -05:00
ilia	2b6065e486	Merge pull request 'Finish IP scrub repo-wide, make Python lint gate real (ruff)' (#72) from dev into master	2026-07-26 15:15:23 -05:00
ilia	c51df649b6	ci: fix python-lint job for containers without node (manual clone)	2026-07-26 16:04:40 -04:00
ilia	fc3960afa9	lint: replace no-op flake8 script with gating ruff check, fix findings	2026-07-26 16:01:28 -04:00
ilia	abb7b34700	docs: finish homelab IP scrub across repo, add e2e env-defaults local override	2026-07-26 15:56:57 -04:00
ilia	688c6f7d8e	Merge pull request 'Sync master: scrub public docs, untrack internal notes/caches, roadmap update' (#71) from dev into master	2026-07-26 14:52:54 -05:00
ilia	d6b546c95e	chore: deduplicate env templates into .env.example	2026-07-26 15:30:17 -04:00
ilia	6be4877666	chore: untrack internal notes and Vite cache, ignore logs	2026-07-26 15:29:31 -04:00
ilia	86d2b476b0	docs: scrub homelab IPs and default credentials, reduce emoji noise	2026-07-26 15:29:13 -04:00
ilia	5f8f2e0bee	Update roadmap	2026-07-26 15:27:17 -04:00
ilia	23f0616646	Merge pull request 'security: remove plaintext credentials from .cursorrules' (#70) from security/scrub-cursorrules-creds into dev	2026-07-15 17:42:55 -05:00
ilia	586243cd56	security: remove plaintext dev/Postgres passwords from .cursorrules ... These were committed in cleartext and pushed to remote history. Rotate the dev server SSH password and Postgres 'ladmin' password separately; this only stops the leak going forward and points at Infisical/vault instead.	2026-07-15 18:38:40 -04:00
ilia	da4fc72807	Merge pull request 'test: timing budgets + CI hardening (artifact v3 pin, npm cache retry)' (#69) from test/timing-budgets-ci-hardening into dev	2026-07-15 08:03:20 -05:00
ilia	c0c997f796	test: timing budgets + CI hardening (artifact v3 pin, npm cache retry) ... Closes three items from the outstanding e2e/CI gap list: - Timing budgets: timings.measure() only ever recorded durations for the (still-unwired) Pushgateway export — nothing failed CI when a step got slow. Add e2e/timing-budgets.ts (expectWithinBudget + shared BUDGET_MS buckets) and wire it into every measure() call site across the suite. Mail-wait steps are deliberately left unbudgeted (external mail-trap delivery latency, not a code performance signal). - actions/upload-artifact@v4 doesn't work against this Gitea/act runner's artifact backend — pin to v3 for the e2e failure-report upload. - Shared act_runner npm cache has corrupted platform-native tarballs before (@next/swc-linux-x64-musl) and reds viewer-unit/admin-unit/e2e with no product bug involved. All three npm ci steps now retry once after `npm cache clean --force` on first failure. Verified: full local suite green against DEV (37 passed, 6 skipped, no budget assertion failures) before wiring into CI.	2026-07-15 08:56:31 -04:00
ilia	96351288f0	test: playkit v0.3.1 adoption, Zod widening, PROD smoke, NextAuth write gates (#68)	2026-07-14 22:24:07 -05:00
ilia	72e89aef9f	docs: playkit gaps + next e2e ideas (#67)	2026-07-14 20:26:33 -05:00
ilia	e60abd9263	Merge pull request 'test: FastAPI e2e role-permission gates + gallery search filters' (#66) from test/fastapi-e2e-role-search into dev	2026-07-14 19:47:07 -05:00
ilia	e78fad692f	test: FastAPI e2e role-permission gates + gallery search filter coverage ... - Wire E2E_API_USERNAME/PASSWORD (admin) + E2E_API_VIEWER_USERNAME/PASSWORD (viewer) into the Gitea Actions e2e job so FastAPI-authed specs run in CI. - Add api.role-permissions.spec.ts: viewer 403 vs admin 200/200/200 on /api/v1/users, /api/v1/role-permissions, and /api/v1/photos/bulk-delete (safe no-op via a non-existent photo id — proves the gate, not deletion). - Add gallery.search-filters.spec.ts: tag_id and person_id filters on the public /api/search route return correct subsets, combined filters narrow results, and the /search UI tag-filter interaction updates the URL/count. - Update ROADMAP/README/.env.example for the new env vars and coverage.	2026-07-14 20:42:47 -04:00
ilia	c31c76b5a8	Merge pull request #65 from test/e2e-gaps-roadmap ... Fill e2e gaps and ROADMAP (#65)	2026-07-14 18:28:59 -05:00
ilia	4ef8fcc7e7	Track e2e fixture PNG (gitignore exception)	2026-07-14 19:19:49 -04:00
ilia	d9910acdde	Fill e2e gaps: storageState, real upload POST, session smoke ... Add auth setup project, viewer session check, upload that posts a fixture, FastAPI login spec (skips without E2E_API_*), and repo ROADMAP.md.	2026-07-14 19:17:14 -04:00
ilia	988e9accf8	Merge pull request 'Expand e2e auth, Vitest CI, env-defaults, API catalog' (#64) from test/e2e-auth-vitest-ci into dev	2026-07-14 18:11:05 -05:00
ilia	217b82d912	Bump playkit to v0.3 and use Zod API schemas ... Adopt assertSchema via ApiClient, playkitFailureArtifacts in Playwright config, and keep e2e login on e2e@levkine.ca credentials from CI secrets.	2026-07-14 19:02:48 -04:00
ilia	47b15049bc	Expand e2e auth coverage, Vitest CI, and shared URL defaults ... Wire viewer-frontend Vitest into Gitea Actions, centralize DEV base URLs in env-defaults.json, expand playkit API catalog specs, and land auth/mail flows plus verify-email public-host redirect and idle-logout e2e hooks.	2026-07-14 18:49:42 -04:00
ilia	62d5a66ffa	Merge pull request 'Add Vitest + React Testing Library setup for viewer-frontend' (#63) from test/viewer-frontend-vitest-setup into dev	2026-07-14 17:39:59 -05:00
ilia	975d0c809d	Add Vitest + React Testing Library setup for viewer-frontend ... Establishes frontend unit testing infra (jsdom env, RTL, jest-dom matchers, common Radix/jsdom polyfills) and seeds it with tests for lib/utils.ts, lib/photo-utils.ts, hooks/useFocusTrap.ts, and ThemeToggle.tsx (46 tests total).	2026-07-14 18:35:30 -04:00
ilia	05b908241d	Merge pull request 'test: add cross-endpoint integration and error-handling suites' (#62) from test/backend-integration-error-suites into dev	2026-07-14 17:24:37 -05:00
ilia	5303580107	test: add cross-endpoint integration and error-handling suites ... Adds test_api_integration.py (person identification, tag+search, favorites+search, bulk favorites, and role-permission-grant workflows chained across multiple endpoints) and test_api_errors.py (404/401/403/422 consistency sweeps, SQL-injection/XSS-style input handling, large-payload handling) per the two suites the existing tests/API_TEST_PLAN.md already documented but never implemented. Along the way, found and documented (via a passing test, not a fix) that GET /api/v1/faces/unidentified has no auth dependency, unlike its sibling routes.	2026-07-14 18:23:15 -04:00
ilia	fc8b47863d	Merge pull request 'test: cover 7 previously-untested backend API route modules' (#61) from test/backend-pytest-coverage-gaps into dev	2026-07-14 17:17:20 -05:00
ilia	2d6bbf1d13	test: cover 7 previously-untested backend API route modules ... Adds pytest coverage for metrics, click_log, role_permissions, videos, pending-identifications, pending-linkages, and reported-photos — the last three required extending conftest with a second (auth) test database + DDL mirroring the Prisma schema-auth.prisma tables, since those endpoints read/write DATABASE_URL_AUTH via raw SQL. pending-photos.py is intentionally left uncovered for now (heavy filesystem/hash-based duplicate-detection logic needs its own mocking strategy) and tracked as a follow-up.	2026-07-14 18:15:15 -04:00
ilia	0f24e7e6ba	Merge pull request 'test: add Playwright e2e smoke suite for punimtag dev' (#60) from test/e2e-playwright-smoke into dev	2026-07-14 16:13:57 -05:00
ilia	0a9223c943	test: add Playwright e2e smoke suite for punimtag dev ... Add an e2e/ Playwright harness (via @levkin/playkit) that smoke-tests the public DEV host: login page loads, sign-out never redirects to a LAN host, FastAPI /health responds, and forgot-password mail lands in Mailtrap with a public reset link (Kolby #56/#57 regressions). Wire it into Gitea Actions as a new `e2e` job (self-hosted runner, Chromium via Playwright), gated behind the existing skip-ci-check. Add npm root scripts (install:e2e, test:e2e) and gitignore e2e build artifacts (node_modules, reports, .env).	2026-07-14 17:11:38 -04:00
ilia	44f3d696e4	Merge pull request 'feat: add dark mode and audit viewer-frontend accessibility' (#59) from a11y/dark-mode-and-focus-management into dev	2026-07-14 15:25:46 -05:00
ilia	c011c8078e	feat: add dark mode and audit viewer-frontend accessibility ... Add next-themes light/dark/system theming with an accessible toggle in every header, and close out an a11y pass across the viewer app: skip-to-content link, main landmarks and heading hierarchy on every route, focus-trapped dialog semantics for the photo viewer modals, aria-label/live-region coverage for dynamic messages and icon buttons, and dark: variants for previously light-only colors.	2026-07-14 16:24:51 -04:00
ilia	e54c60912c	Merge pull request 'fix: prevent sign-out crash and surface real email-send failures' (#58) from fix/logout-crash-and-email-delivery into dev	2026-07-14 12:14:53 -05:00
ilia	bb09159133	fix: prevent sign-out crash and surface real email-send failures ... - NextAuth session/jwt callbacks no longer return null (the client useSession() hook chokes on a null session, crashing the app on sign-out for deactivated/refreshed sessions) — fixes #57 - UserMenu/Header sign-out handlers close the Manage Users overlay and popover before calling signOut(), and no longer let a rejected signOut() promise go unhandled - Added an app-level error boundary as a safety net for any remaining client render errors - Registration and forgot-password flows now tell the user honestly when the confirmation/reset email failed to send instead of always claiming success — related to #56 - lib/email.ts throws a clear, actionable error when neither SMTP nor Resend is configured, instead of a cryptic SDK error - Documented required SMTP/Resend env vars in DEPLOYMENT_CHECKLIST.md (were missing entirely, which is why no confirmation/reset emails were ever sent in deployed environments) — fixes #56	2026-07-14 12:44:33 -04:00
ilia	8e297d80e5	ci: add local pre-commit gitleaks hook	2026-07-13 15:00:20 -05:00
ilia	3e39f978f6	Merge pull request 'docs: close shipped triage issues; leave #43/#44 open' (#54) from docs/close-shipped-issues into dev	2026-07-09 19:41:40 -05:00
ilia	1bfc5adb6f	docs: close shipped triage issues; leave #43/#44 open	2026-07-09 20:41:18 -04:00
ilia	4f001e7887	Merge pull request 'docs: Postgres .179 + refresh next-steps' (#53) from docs/fix-postgres-179-and-next-steps into master	2026-07-09 14:17:07 -05:00
ilia	739ab17425	docs: retarget Postgres to .179 and refresh next-steps ... Update deploy docs off dead .181, refresh FIXES_2026-07-09, and point .notes/task_list at Gitea issues as source of truth.	2026-07-09 15:13:31 -04:00
ilia	eeb00339da	Merge pull request 'Release: merge dev into master (open-issue triage + thumb cache)' (#52) from dev into master ... Reviewed-on: #52	2026-07-09 14:03:17 -05:00
ilia	3a4bfa9988	Merge pull request 'fix: open-issue triage (#21,#26,#45,#46,#47,#30-33)' (#51) from fix/open-issues-triage into dev ... Reviewed-on: #51	2026-07-09 13:58:27 -05:00
ilia	3769c897b0	perf: disk-cache grid thumbnails and document 2026-07-09 fixes ... Cache resized thumbs under .cache/photo-thumbnails (360px) so repeat grid loads skip Sharp. Document ticket/infra fixes; drop unused SVGs.	2026-07-09 14:54:08 -04:00
ilia	ffddeca268	fix: address open triage issues (#21,#26,#45,#46,#47,#30-33) ... - #45: re-read local folder when recursive checkbox toggles - #47: clear Identify crop spinner when image is already cached - #46: search selected people by person_ids; AND for "First Last" - #21: enqueue network import without blocking API walk - #26: serve resized grid thumbnails for photos - #30/#31/#33: re-enable small-face filters in auto-match	2026-07-09 14:42:08 -04:00
ilia	2dab2aa7f9	Merge pull request 'PunimTag Web Application - Major Feature Release' (#1) from dev into master ... Reviewed-on: #1	2026-07-09 12:20:31 -05:00
ilia	d69ad1576d	Merge pull request 'chore: merge master into dev (sync homelab CI bootstrap)' (#50) from chore/sync-ci-from-master into dev	2026-05-29 21:52:46 -05:00
ilia	f0529e8274	chore: merge master into dev (sync homelab CI bootstrap) ... Resolve add/add conflicts in CI files by adopting the homelab Gitea Actions workflow from master (#48), replacing the legacy dev ci.yml.	2026-05-29 22:52:19 -04:00
ilia	5144d9a3b0	Merge pull request 'Add homelab Gitea Actions CI (generic)' (#48) from ci/bootstrap-gitea-actions-docker into master	2026-05-29 21:46:27 -05:00
ilia	2db7ee88c9	ci: sync gitleaks allowlist	2026-05-29 21:31:59 -05:00
ilia	c0b09b1d6b	ci: refresh workflow (re-run pipelines)	2026-05-29 21:31:56 -05:00
ilia	2658bc7b07	ci: sync gitleaks allowlist	2026-05-29 21:28:30 -05:00
ilia	7279c57955	ci: refresh workflow (re-run pipelines)	2026-05-29 21:28:28 -05:00
ilia	e2f980ad1a	ci: sync gitleaks allowlist	2026-05-29 21:24:22 -05:00
ilia	60c57bc351	ci: refresh workflow (re-run pipelines)	2026-05-29 21:24:13 -05:00
ilia	ef5d4df233	ci: add homelab gitleaks allowlist	2026-05-29 21:19:59 -05:00
ilia	d876a67244	ci: refresh workflow (re-run pipelines)	2026-05-29 21:19:56 -05:00
ilia	4fd6c4f24c	ci: refresh workflow (re-run pipelines)	2026-05-29 20:31:01 -05:00
ilia	eaa03d115b	ci: refresh workflow (re-run pipelines)	2026-05-29 20:28:42 -05:00
ilia	e6bd689a22	ci: sync workflow template	2026-05-29 20:26:18 -05:00
ilia	d21741c5b0	ci: refresh workflow (re-run pipelines)	2026-05-29 20:20:47 -05:00
ilia	9cfe05bd96	ci: sync workflow template (node container + host fixes)	2026-05-29 20:15:07 -05:00
ilia	c6fe7cbd3a	ci: add homelab Gitea Actions workflow (ci-docker.yml)	2026-05-29 16:15:08 -05:00
ilia	85d5c120d4	Updated	2025-09-15 12:16:01 -04:00
ilia	cb61d24bc3	Remove photos database from tracking	2025-09-03 17:20:51 -04:00
ilia	b4d9f55691	Clean repository: remove photos from history, update gitignore	2025-09-03 17:20:31 -04:00
ilia	07e45950b6	Update gitignore and add run script	2025-09-03 17:13:36 -04:00
ilia	0e66b2253f	Update project documentation and structure; enhance README, finalize project reorganization, and improve testing standards.	2025-09-03 17:07:17 -04:00
ilia	f4a83b3c40	remove photos	2025-08-14 17:22:28 -08:00
ilia	455bdac187	Pushing code to migrate git	2025-08-15 00:57:39 -08:00