Both list pages were capped at max-w-6xl and 3 columns, wasting most
of the horizontal space on wide monitors. Drop the width cap
(w-full) and step the card grid up to 4 columns at xl and 6 at 2xl.
Adds a nullable lcsc_number column to parts so each part records its
LCSC code for reordering -- surfaced as an "LCSC #" field on the
add/edit forms (autofilled by the lookup) and as a click-through link
to the LCSC product page on the detail view.
The autofilled Name now comes from LCSC's human-readable "Key
Attributes" summary (e.g. "RES 10kohm +/-1% 100mW 0603") scraped from
the product page's SSR data, falling back to the manufacturer name if
that scrape returns nothing. Also normalizes lowercase LCSC codes to
uppercase so "c25804" resolves instead of dead-ending on a 404.
A leftover child process from npm ci/build can keep the SSH
session's file descriptors open even after the remote script
exits, leaving the Action step hanging indefinitely with no
useful signal -- the actual deploy work (build, restart, health
check) normally finishes in well under a minute.
The service can take longer than 2s to finish starting after
restart (DB pool init, etc), so systemctl is-active would
occasionally still report "activating" at the fixed check point --
CI marked the run failed even though the app came up moments later
and was actually fine. Poll for up to 15s instead, and dump service
status on a real failure so debugging doesn't require SSH access.
Form actions and API endpoints under (app) previously relied only on
the layout load's redirect, which SvelteKit never runs before POST
actions/+server.ts handlers -- an unauthenticated request could reach
any mutating action directly. Gate it centrally in hooks.server.ts
instead of patching ~20 files individually.
Also adds a part-number lookup box on Add/Edit Part: paste an LCSC
code (e.g. C25804) and category/value/voltage/tolerance/mounting/
package auto-fill from LCSC's product data. Digikey is wired as a
dispatcher branch, inactive until DIGIKEY_CLIENT_ID/SECRET are set.
- Drop /i flag: m (milli) vs M (mega) are now case-sensitive
- Put Hz before H in unit alternation so kHz isn't parsed as kH (kiloHenry)
- u already accepted as micro alongside µ; unit suffix optional (100u, 10k work)
- After adding a part, redirect to /parts overview instead of detail page
Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
- New value_numeric column (double precision) stores parsed base-SI value
- parseValueNumeric() handles SI prefixes (p/n/µ/m/k/M/G) for F, H, Ω, Hz
- Computed on save in new/edit actions
- List page sortable by value_numeric (sorts within category, nulls last)
- Sort toggle added to filter bar
Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
Tags carry a URL record (https://host/d/{uuid}) plus a text record with the
raw UUID, so iOS scan-to-open works natively and the UUID stays recoverable
if the domain ever changes. Short-link routes /d/{id} and /i/{id} keep tag
payloads compact and decouple them from canonical paths. Write flow detects
Web NFC support and degrades gracefully (Android Chrome only) with a clear
fallback message. Each successful write is logged in a new device_tags
table; the device page surfaces "NFC tag written X ago".
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
- /api/upload-image endpoint saves images and returns URL
- Paste images from clipboard directly into the editor
- Drag and drop images onto the editor
- Toolbar image button opens file picker for manual upload
- Uploaded images inserted as  Markdown at cursor position
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Reusable MarkdownEditor component using EasyMDE:
- Toolbar: bold, italic, headings, quotes, lists, links, images,
tables, code blocks, preview, side-by-side, fullscreen
- Dark mode support with custom CSS overrides
- Value syncs via bind:value for form submission
- Applied to both wiki new and edit pages
- Replaces the plain textarea + manual preview toggle
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Reusable TagInput component:
- Tags appear as blue chips instantly on comma/Enter press
- Remove tags by clicking X on the chip or Backspace when empty
- Autocomplete dropdown filters existing tags as you type
- All existing tags shown as clickable suggestions below
- Hidden input submits comma-separated value
- Applied to wiki new and edit pages
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Prevents package-lock.json conflicts by resetting local changes
before pulling. Uses npm ci (clean install from lockfile) instead
of npm ci --production=false.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- wiki_categories, wiki_pages, wiki_tags, wiki_page_tags tables
- /wiki overview with category-grouped pages, tag sidebar, search
- /wiki/new create page with Markdown editor and live preview
- /wiki/[slug] view page with rendered Markdown, tags, edit/delete
- /wiki/[slug]/edit with pre-populated editor
- Tag input with existing tag suggestions (click to add)
- Category management (add/delete) in sidebar
- Tailwind Typography plugin for prose styling
- marked package for Markdown rendering
- Sidebar nav item with book icon
Run db:push on server to create wiki tables.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Caddy sets X-Forwarded-Proto: https on all routes, making SvelteKit
think the request is HTTPS. The session cookie got the Secure flag,
but the browser on http://100.81.174.129 won't send Secure cookies
over plain HTTP. Now checks the actual Origin header to determine
if the connection is truly HTTPS.
Tor works because .onion is treated as a secure context by Tor Browser.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
SvelteKit's built-in CSRF only allows one origin, breaking access via
NetBird/Yggdrasil/Tor IPs. Now:
- Disabled checkOrigin in svelte.config.js
- Custom CSRF in hooks.server.ts checks Origin against ALLOWED_ORIGINS
- ALLOWED_ORIGINS env var: comma-separated list of trusted origins
- Caddy no longer needs to rewrite Host/Origin headers
- Each access method (public domain, NetBird IP, Yggdrasil, Tor onion)
just needs its URL added to ALLOWED_ORIGINS
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
SvelteKit checks the browser's Origin header, not just Host or
X-Forwarded-Proto. Rewrite Origin to https://collection.newedge.house
so CSRF passes on all non-public routes (NetBird, Yggdrasil, Tor).
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
SvelteKit expects ORIGIN=https://... so all routes must send
X-Forwarded-Proto: https regardless of actual connection scheme.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Rewritten for the actual architecture: separate upstream Caddy handles
TLS for public domain, LXC Caddy only does HTTP. Added NetBird
interface binding, explicit per-interface blocks, upstream Caddy
config snippet.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Caddyfile config with shared proxy snippet that sets Host header for
CSRF compatibility. Handles:
- Public domain with auto HTTPS (Let's Encrypt)
- LAN/internal on port 80
- Tor hidden service via localhost:8880
- Yggdrasil IPv6 on port 80
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- ID and barcode on same row (flex horizontal, ID left, barcode right)
- 1mm gap between title and details section
- Detail text bumped to 6-6.5pt (from 5-5.5pt)
- Details grouped in their own block for consistent spacing
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Barcode rendered without embedded text (includetext: false)
- ID rendered as separate HTML text at 9pt bold with letter-spacing
- All label text left-aligned instead of centred
- Barcode height reduced to 5mm to fit
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
The custom @page margins conflicted with browser minimum margins,
causing overflow. Now @page margin is 0, barcode height 8mm→6mm,
scale 3→2, text size 12→10 so content fits within 29mm even with
browser minimum margins selected.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Set @page margins to top:0 right:0.5mm bottom:0 left:2mm matching
the working configuration found for DK-11209 labels. Updated setup
hint text on all print pages.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
All print labels (device, component, batch) now show centred text
with a Code 128 barcode at the bottom instead of a QR code on the
left. Layout uses vertical flex column for clean centring.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- feature_requests table with title, description, status, votes, createdBy
- Submit new requests with title and description
- Upvote button sorted by most votes
- Status dropdown: open, planned, in-progress, done, declined
- Color-coded status badges
- Delete button per request
- Sidebar nav item with lightbulb icon
Run db:push on the server to create the new table.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- All print labels (device, component, batch) now use JetBrains Mono
- Device labels show voltage and frequency below serial number
- Batch print labels include voltage/frequency from server data
- Font loaded from Google Fonts on print pages only
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- /batch-print page with device table, checkboxes, search, category filter
- Select all / individual selection with highlighted rows
- "Print N Labels" button opens popup with all selected labels
- /print/batch renders one DK-11209 label per device with page breaks
- Auto-print on popup open, last label avoids trailing blank page
- Sidebar nav item added
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- QR code on left encodes the short ID (not URL)
- Text centred on right: title, brand/model, serial, large bold ID
- ID displayed at 11pt bold with letter-spacing for readability
- Removed barcode dependency from print pages
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Reduced padding (1.5mm → 1mm), barcode height (7mm → 6mm)
- Tighter line heights, combined serial/voltage on one line
- Barcode text size 14 → 12 to reduce image height
- Vertical flex layout instead of horizontal (no QR = more space)
- Should now fit within 29mm height without overflow
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Component cards now display the first uploaded image as a thumbnail,
matching the device list card design. Falls back to a placeholder
icon when no image is uploaded.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Reusable ImageLightbox component with dark overlay, close on
click/Escape, zoom-in cursor on thumbnails. Applied to both
device and component detail pages.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Click chevron or checklist title to expand/collapse
- Completed checklists (100%) auto-collapse on page load
- Completed title shown in green with checkmark icon
- Progress bar and count always visible when collapsed
- Items and add-item form hidden when collapsed
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
New reusable components:
- ImageUpload.svelte: drag-and-drop / click / paste zone with file
icon, preview of selected filename, caption field, 50MB limit
- DocumentUpload.svelte: same pattern for documents with description
field instead of caption
Applied to both device and component detail pages, replacing the old
inline file input forms. Cleaner look matching modern upload UIs.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Shows number of non-done todos (todo + in_progress) next to the
Todos nav item. Hides when count is zero.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Image upload/delete on component detail page (same pattern as devices)
- Images section with grid, hover-to-delete, 50MB client-side limit
- Sidebar component count now excludes disabled components by joining
componentInstances with components and filtering disabled=false
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- disabled boolean on components table (default false)
- Component list filters out disabled components
- Component detail returns 404 for disabled
- Delete button with confirmation on component detail page
- Installation form filters out instances of disabled components
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Components are now split into two concepts:
- Component (type definition): title, componentType, brand, partNumber,
specs, notes, default condition/firmware/location
- Component Instance (individual physical unit): serialNumber, condition,
firmwareVersion, notes, currentDeviceId, locationId
Key changes:
- New component_instances table with per-unit tracking
- Component list shows cards with total/installed/available counts
- Component detail page shows all instances with inline edit
- Add instances: bulk (quantity) or one at a time
- Each instance has install/remove/edit/delete actions
- Installation log now references instances, not components
- Device detail shows installed instances with instance numbers
- Dashboard and sidebar counts use instance totals
- Location pages show instances, not component types
- Labels show component type info (serial is per-instance)
IMPORTANT: Run db:push on the server after deploy to create the new
tables and columns. Existing component data will need manual migration.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Added BODY_SIZE_LIMIT=52428800 (50MB) to .env.example
- handleError in hooks catches body size exceeded and returns friendly message
- Client-side file size check on image upload input (alerts before submit)
- adapter-node uses BODY_SIZE_LIMIT env var (default was 512KB)
To fix: add BODY_SIZE_LIMIT=52428800 to .env on the server and restart.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
In production with adapter-node, the relative path 'static/uploads'
doesn't resolve correctly. Now uses UPLOAD_DIR env variable (absolute
path) for both saving and serving uploaded files.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Replaced all 'B4L Repair' references with 'My Collection'
- Added favicon.png next to the title in the sidebar
- Added favicon.png on the login page above the title
- Updated all page <title> tags
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
