The default /thumbnail endpoint serves a 250x374 WebP, which is
visibly blurry on portfolio cards meant to show off real work.
size=preview returns a ~1440px-wide JPEG at a reasonable file size,
confirmed directly against the live Immich instance.
Fixes#25.
Creates the OAuth2 provider, application, lisilou-admin group, and the
client enrollment flow via the Authentik API, then prints ready-to-paste
api/.env lines. Run with AUTHENTIK_URL + AUTHENTIK_TOKEN once CT121 is up.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
- Fix applyConfig self-recursion (const _origApply captured the hoisted
wrapper itself): site.json config — theme, portfolio, socials, bio —
was never applied; site silently fell back to hardcoded brown defaults
- Strengthen theme test to assert the configured primary color exactly
- Portfolio covers: styled placeholder on missing image (like locations),
restore img when Immich carousel kicks in; overlay always visible on touch
- Optional hero photo via site.heroImage with soft scrim (activates only
when the image loads); site.json points at /images/hero.jpg
- Option cards: equal height, centered content
- /#book deep link also works via hashchange
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
- fetch+reset instead of pull (survives working-tree drift on CT111)
- create api/.env from example and the external web network if missing
- health check now retries for 120s and fails the run properly
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
- api/auth.js: zero-dep OIDC authorization-code flow with PKCE against
Authentik; HMAC-signed HttpOnly session cookies (SESSION_SECRET)
- requireAdmin now accepts an OIDC session in the admin group; legacy
ADMIN_SECRET bearer kept for n8n and scripts
- New client endpoints: GET /api/my-bookings, owner-gated contract download
- Bookings created while signed in are bound to the client's OIDC sub
- Dashboard: "Sign in with SSO" alongside passphrase fallback
- New /my-bookings portal page (nginx route + themed page)
- Fix booking modal: content area now scrolls; nav no longer overlaps the
calendar on short viewports (was swallowing clicks on date cells)
- 10 new Playwright tests; suite green at 67
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
- api/google-calendar.js: service account JWT auth + freebusy query
using only Node.js built-in crypto (no new npm deps). In-memory cache:
5-min busy dates, 1-hr OAuth token. Gracefully returns empty busy list
when GOOGLE_CALENDAR_ID / GOOGLE_SERVICE_ACCOUNT_JSON not configured.
- api/server.js: GET /api/availability?year=YYYY&month=MM endpoint
with 5-min Cache-Control; errors return { busy:[], configured:false }
so the UI always works even if Calendar is unavailable.
- src/index.html: replace plain <input type="date"> in step 1 with a
custom month-grid calendar (dpInit/dpRender/dpNav/dpSelectDate).
Hidden #session-date input carries the value for the rest of the wizard.
Past dates and busy dates are visually blocked; month nav pre-fetches.
- tests/booking.spec.js: 4 new calendar UI tests + updated openAndPickDate
helper to click a rendered day cell.
- tests/api.spec.js: 2 new availability endpoint tests.
Setup: set GOOGLE_CALENDAR_ID and GOOGLE_SERVICE_ACCOUNT_JSON in api/.env.
See api/google-calendar.js header for step-by-step instructions.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- Extract notify() helper (fire-and-forget, never blocks flow)
- Fire booking_created after INSERT in POST /api/bookings
- Fire contract_signed after PDF stamp in POST /api/bookings/:id/sign
- Add GET /api/bookings/:id/contract to serve signed PDFs
- New env vars: N8N_WEBHOOK_URL, PHOTOGRAPHER_EMAIL, SITE_URL
n8n workflow (LisiLou Booking Notifications, ID c2oyyQyuzMuo1kLw):
Webhook → Code (routes by event, builds email items) → Send Email (SMTP)
Handles: booking_created (2 emails), contract_signed, payment_confirmed
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Step reorder (still 7 steps): Info (5) → Contract (6) → Payment (7)
- Client info moved to step 5 so it's available for the contract signature
name and the personalised Venmo note before the payment step
- Contract is now step 6 (initContractStep triggered on step 6 entry)
- Step 7 is the full payment step — no separate confirm step needed
Payment step (step 7):
- Compact summary table: date, session type, length, location
- Large price display from siteConfig.booking.pricing
- "Pay on Venmo" button linking to:
https://venmo.com/<username>?txn=pay&amount=<price>¬e=<encoded-note>
Note format: "LisiLou Booking - [SessionType] on [Date]"
- QR code rendered from GET /api/venmo-qr?url=<encoded> (server-side SVG
via qrcode package, site colours applied)
- "I've sent payment" checkbox gates the Submit button
- Clicking Submit creates booking with payment_status='pending_confirmation',
then signs the contract — success screen shown immediately
Configuration: venmoUsername lives in config/site.json under
booking.venmoUsername — change it there to point at any Venmo account with
no code change and no rebuild.
API additions:
- GET /api/venmo-qr?url= — validates url starts with venmo.com, returns SVG
- POST /api/bookings now accepts payment_status field
Closes#7
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
better-sqlite3's prebuild-install downloads prebuilt glibc binaries for
linux-x64, which fail on Alpine's musl libc with 'fcntl64: symbol not found'.
npm_config_build_from_source was not being honoured. Switching to a
glibc-based image sidesteps the issue entirely; homelab image size is fine.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
npm_config_build_from_source=true tells prebuild-install to skip the prebuilt
glibc binary download and compile against the container's musl libc instead.
The previous attempt (npm rebuild --build-from-source) ran after the glibc
binary was already installed and didn't override it.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
prebuild-install downloads a prebuilt glibc .node binary for linux-x64 which
fails on Alpine (musl) with 'fcntl64: symbol not found'. Adding an explicit
npm rebuild --build-from-source step forces compilation against musl libc
inside the container, which is correct.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Frontend (step 5):
- PDF.js 3.11.174 from CDN renders the contract inline in a scrollable viewer
- Next button logic stays unlocked; signature pad is visually locked (greyed +
pointer-events:none) until user scrolls to the bottom of the contract
- HTML5 canvas signature pad with mouse and touch support; Clear button resets
- Typed full name field required to confirm identity
- Fallback agreement text renders if /api/contracts/template returns 404,
auto-marks as scrolled — photographer adds PDF later with no code change
Backend:
- GET /api/contracts/template — serves api/contracts/model-release.pdf
- POST /api/bookings/:id/sign — stamps signature image + name/date/booking ID
onto the PDF via pdf-lib, saves to api/signed-contracts/<id>.pdf, updates
contract_signed_at and contract_pdf_path in the bookings table, fires n8n
webhook; gracefully skips PDF stamping if template is missing
- submitBooking() now calls POST /api/bookings then POST /api/bookings/:id/sign
sequentially before showing the success screen
Closes#6
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Documents the two-service Docker Compose setup, booking wizard step status,
all JS functions, location photo workflow, CI/CD pattern, and pending issues
so the project can be resumed from any machine that clones the repo.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- site.json: add locations array (River Bottoms, City Park, Downtown, Studio)
with heroImage, galleryImages, tags, and description per location
- public/images/locations/: directory skeleton with .gitkeep; photographer
drops hero.jpg + numbered gallery images here without any rebuild
- Step 4: location-grid renders cards from config, each with hero image,
location name, and tag pills; missing images fall back to a styled placeholder
- Clicking a card selects it (shows checkmark overlay) and opens an inline
detail panel below the grid showing gallery images + full description + tags;
clicking the same card again collapses the detail panel
- populateSummary and submitBooking now resolve the location name from config
rather than storing the raw ID
Closes#5
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- site.json: add booking section with sessionTypes, pricing, venmoUsername
- Step 2: session type cards rendered from siteConfig.booking.sessionTypes;
"Other" option reveals a free-text field; validated before advancing
- Step 3: two large length cards with duration badge + price from config;
falls back to $75/$150 defaults if config missing
- selectOption shows/hides "Other" field; stores sessionTypeOther in state
- populateSummary uses config labels and shows price in length summary row
- submitBooking sends "other: <description>" for custom session types
Closes#4
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
git pull fails if untracked files would be overwritten. Switching to
git fetch + reset --hard keeps the dev LXC in sync unconditionally.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Generated lockfile on dev LXC (Node 20, npm 10). Dockerfile now uses
npm ci --omit=dev which requires the lockfile and is more deterministic
than npm install.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- 7-step booking flow modal: Date → Session → Length → Location →
Contract → Payment → Confirm
- Step indicator bar with completed/active states and connector lines
- Per-step validation with inline error messages
- Option card selection pattern for steps 2, 3, 4
- Summary panel on step 7 with client contact fields
- POSTs to POST /api/bookings on final submit with success screen
- Book a Session button added to nav, hero CTA, and mobile nav
- Pricing pulled from siteConfig.booking.pricing when available
- Steps 3-6 have stub UI with comments marking which issue fills them
Closes#2
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- New api/ service: Express + better-sqlite3, health check at GET /api/health,
POST /api/bookings stores sessions with all required fields
- Dockerfile with Alpine build deps for native sqlite3 module
- docker-compose.yml: api service with volume mounts for data, signed-contracts, contracts
- nginx.conf: proxy /api/ to api:3001; Immich regex locations remain higher priority
- .gitignore: exclude SQLite db file and signed PDFs from version control
Closes#1
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- Created self-hosted runner workflow for automatic deployment
- Deploys on push to main branch
- Builds and restarts Docker containers
- Includes health check verification
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
- Updated Immich base URL to immich.jerodrigged.com
- Senior Portraits: use all-seniors album
- Changed Engagements to Couples, use all-couples album
- Changed Families to Family or Friends, use families-or-friends album
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
- Check for existing local templates first
- Show available templates for debugging
- Allow manual template entry as fallback
- Fix template path handling
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Instead of hardcoding the template name, now searches for the
latest available Debian 12 template.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
jhodgkin
root