← back to Butlr
initial scaffold — HoldForMe phase-1 onboarding MVP. Captures the full call submission (business + goal + account info + callback + limits + consent) across 13 category presets. Standing rules: gucci hero, logo UL/hamburger UR, helmet+rate-limit security baseline, dark/light toggle with localStorage. Phase 2 will wire Twilio Voice.
af3a901992c95f32ac36b1cc844c5b7661dfa20b · 2026-05-12 10:33:11 -0700 · SteveStudio2
Files touched
A .gitignoreA README.mdA lib/data.jsA package-lock.jsonA package.jsonA public/css/site.cssA public/css/theme.cssA public/js/form.jsA public/js/hamburger.jsA public/js/theme-toggle.jsA routes/public.jsA server.jsA views/partials/footer.ejsA views/partials/head.ejsA views/partials/header.ejsA views/public/404.ejsA views/public/call.ejsA views/public/calls.ejsA views/public/error.ejsA views/public/home.ejsA views/public/how.ejsA views/public/new.ejs
Diff
commit af3a901992c95f32ac36b1cc844c5b7661dfa20b
Author: SteveStudio2 <stevestudio2@SteveStacStudio.lan>
Date: Tue May 12 10:33:11 2026 -0700
initial scaffold — HoldForMe phase-1 onboarding MVP. Captures the full call submission (business + goal + account info + callback + limits + consent) across 13 category presets. Standing rules: gucci hero, logo UL/hamburger UR, helmet+rate-limit security baseline, dark/light toggle with localStorage. Phase 2 will wire Twilio Voice.
---
.gitignore | 10 +
README.md | 38 ++
lib/data.js | 164 ++++++++
package-lock.json | 1006 +++++++++++++++++++++++++++++++++++++++++++++
package.json | 20 +
public/css/site.css | 296 +++++++++++++
public/css/theme.css | 44 ++
public/js/form.js | 32 ++
public/js/hamburger.js | 28 ++
public/js/theme-toggle.js | 10 +
routes/public.js | 85 ++++
server.js | 82 ++++
views/partials/footer.ejs | 17 +
views/partials/head.ejs | 24 ++
views/partials/header.ejs | 25 ++
views/public/404.ejs | 11 +
views/public/call.ejs | 74 ++++
views/public/calls.ejs | 40 ++
views/public/error.ejs | 12 +
views/public/home.ejs | 108 +++++
views/public/how.ejs | 48 +++
views/public/new.ejs | 161 ++++++++
22 files changed, 2335 insertions(+)
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..65a9d03
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,10 @@
+node_modules/
+.env*
+tmp/
+*.log
+.DS_Store
+dist/
+build/
+.next/
+data/calls.json
+data/calls.json.lock
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..50de64c
--- /dev/null
+++ b/README.md
@@ -0,0 +1,38 @@
+# HoldForMe
+
+We wait on hold so you don't have to. Credit cards, hospitals, restaurants, anywhere a queue stands between you and a human.
+
+## Phase 1 — onboarding MVP (this is what's built)
+
+- Submission form capturing: business name, business phone, the goal of the call, account info (account number, last-4 SSN, billing ZIP, DOB, verbal-auth password), callback name/phone/email, best-time window, max hold time, max spend, recording consent, terms consent
+- 13 category presets (credit-card-increase, credit-card-dispute, hospital-billing, hospital-appointment, restaurant-reservation, airline-change, cable-cancel, insurance-claim, utility-dispute, warranty-claim, mortgage-loan, subscription-cancel, other)
+- Per-category default goal text pre-fills the textarea
+- Call queue + per-call detail page with masked-sensitive fields + Reveal toggle
+- Security: helmet (CSP/HSTS/X-Frame-Options/Referrer-Policy/Permissions-Policy), express-rate-limit (200/min global, 20/min on /api), x-powered-by disabled
+- Standing rules: logo UL, hamburger UR, Gucci-style huge hero, dark/light toggle with localStorage persistence
+
+## Phase 2 (not yet)
+
+- Twilio Voice integration — actual dial, IVR navigation, hold-music detection, human-agent detection, bridge-to-user
+- Optional AI voice agent for low-stakes calls (reservations, simple cancellations)
+- SMS / email notifications when an agent picks up
+- Encrypted-at-rest sensitive fields
+- Stripe billing for the $9/$29 plans
+
+## Run
+
+```
+PORT=9932 node server.js
+# → http://localhost:9932
+```
+
+## Routes
+
+- `/` — home + use-case grid
+- `/new` — submission form (?category=foo to preset)
+- `/new` POST — submit
+- `/calls` — your queue
+- `/calls/:id` — per-call detail (`?reveal=1` to see sensitive fields)
+- `/api/category/:id` — JSON for the form's preset hints
+- `/how-it-works`
+- `/healthz`
diff --git a/lib/data.js b/lib/data.js
new file mode 100644
index 0000000..0aa6bd9
--- /dev/null
+++ b/lib/data.js
@@ -0,0 +1,164 @@
+// JSON-backed call queue. data/calls.json is gitignored — each tester's
+// queue stays out of the repo. Sensitive fields (account number, SSN last-4,
+// auth password) are stored but never echoed back in list views; only
+// surfaced on the detail page behind a "Reveal" toggle.
+
+const fs = require('fs');
+const path = require('path');
+const crypto = require('crypto');
+
+const FILE = path.join(__dirname, '..', 'data', 'calls.json');
+
+function readAll() {
+ try { return JSON.parse(fs.readFileSync(FILE, 'utf8')); }
+ catch (e) { if (e.code === 'ENOENT') return []; throw e; }
+}
+
+function writeAll(rows) {
+ fs.mkdirSync(path.dirname(FILE), { recursive: true });
+ fs.writeFileSync(FILE, JSON.stringify(rows, null, 2));
+}
+
+function newId() {
+ return crypto.randomBytes(6).toString('base64url');
+}
+
+function maskAccount(s) {
+ if (!s) return '';
+ const t = String(s).replace(/\s+/g, '');
+ if (t.length <= 4) return '••••';
+ return '•'.repeat(Math.max(0, t.length - 4)) + t.slice(-4);
+}
+
+// Categories Steve named + a few of the obvious adjacencies. Used to pre-fill
+// "what kind of call is this" so the UX can show category-appropriate fields.
+const CATEGORIES = [
+ { id: 'credit-card-increase', label: 'Credit card — limit increase', icon: '💳',
+ needsAccount: true, defaultGoal: 'Request a credit-limit increase from $X to $Y on this account.' },
+ { id: 'credit-card-dispute', label: 'Credit card — dispute a charge', icon: '⚖️',
+ needsAccount: true, defaultGoal: 'Dispute charge of $X dated MM/DD from MERCHANT. Reason: ___.' },
+ { id: 'hospital-billing', label: 'Hospital — billing dispute', icon: '🏥',
+ needsAccount: true, defaultGoal: 'Question / dispute bill #___ for date of service MM/DD. Reason: ___.' },
+ { id: 'hospital-appointment', label: 'Hospital — schedule appointment', icon: '📅',
+ needsAccount: false, defaultGoal: 'Schedule an appointment with Dr. ___ on/around MM/DD for ___.' },
+ { id: 'restaurant-reservation', label: 'Restaurant — make a reservation', icon: '🍽️',
+ needsAccount: false, defaultGoal: 'Book a table for ___ people on MM/DD at HH:MM. Name: ___.' },
+ { id: 'airline-change', label: 'Airline — change / refund', icon: '✈️',
+ needsAccount: true, defaultGoal: 'Change flight CONFIRMATION from MM/DD to MM/DD. Or request refund per policy.' },
+ { id: 'cable-cancel', label: 'Cable / ISP / wireless — cancel', icon: '📡',
+ needsAccount: true, defaultGoal: 'Cancel service effective MM/DD. Confirm no early-termination fee.' },
+ { id: 'insurance-claim', label: 'Insurance — claim status / appeal', icon: '🛡️',
+ needsAccount: true, defaultGoal: 'Check status of claim # ___ filed on MM/DD. Or appeal denial.' },
+ { id: 'utility-dispute', label: 'Utility — dispute bill', icon: '⚡',
+ needsAccount: true, defaultGoal: 'Dispute bill amount $X for service period MM/DD-MM/DD. Reason: ___.' },
+ { id: 'warranty-claim', label: 'Warranty — claim / repair', icon: '🔧',
+ needsAccount: false, defaultGoal: 'File a warranty claim on PRODUCT, model #, serial #, purchased MM/DD. Issue: ___.' },
+ { id: 'mortgage-loan', label: 'Mortgage / loan — payoff / hardship',icon: '🏦',
+ needsAccount: true, defaultGoal: 'Request payoff statement OR hardship-modification options on loan # ___.' },
+ { id: 'subscription-cancel', label: 'Subscription — cancel / refund', icon: '🔁',
+ needsAccount: false, defaultGoal: 'Cancel SERVICE subscription effective MM/DD. Refund last charge if eligible.' },
+ { id: 'other', label: 'Something else', icon: '☎️',
+ needsAccount: false, defaultGoal: '' },
+];
+
+function categoryById(id) {
+ return CATEGORIES.find(c => c.id === id) || null;
+}
+
+function validatePhone(p) {
+ // Lightweight US-number sanity check. Strip everything that isn't a digit
+ // and require 10-11 digits (11 = leading 1).
+ const digits = String(p || '').replace(/\D/g, '');
+ if (digits.length === 10) return '+1' + digits;
+ if (digits.length === 11 && digits.startsWith('1')) return '+' + digits;
+ if (digits.length >= 8 && digits.length <= 15) return '+' + digits; // intl best-effort
+ return null;
+}
+
+function sanitizeRow(body) {
+ // Whitelist — only accept fields we explicitly know about. Prevents
+ // mass-assignment of e.g. is_admin / status / cost.
+ const cat = categoryById(body.category);
+ const business_phone = validatePhone(body.business_phone);
+ const callback_phone = validatePhone(body.callback_phone);
+ return {
+ id: newId(),
+ created_at: new Date().toISOString(),
+ status: 'queued', // queued | dialing | on_hold | connected | done | failed | cancelled
+ category: cat ? cat.id : 'other',
+ category_label: cat ? cat.label : 'Something else',
+ business_name: String(body.business_name || '').slice(0, 120),
+ business_phone,
+ callback_phone,
+ callback_name: String(body.callback_name || '').slice(0, 80),
+ callback_email: String(body.callback_email || '').slice(0, 120),
+ goal: String(body.goal || '').slice(0, 1500),
+ account_number: String(body.account_number || '').slice(0, 40),
+ last4_ssn: String(body.last4_ssn || '').replace(/\D/g, '').slice(0, 4),
+ billing_zip: String(body.billing_zip || '').replace(/\D/g, '').slice(0, 5),
+ date_of_birth: String(body.date_of_birth || '').slice(0, 10),
+ auth_password: String(body.auth_password || '').slice(0, 60),
+ best_time_window: String(body.best_time_window || '').slice(0, 60),
+ max_hold_minutes: Math.min(180, parseInt(body.max_hold_minutes, 10) || 60),
+ max_spend_cents: Math.min(10000, parseInt(body.max_spend_cents, 10) || 500), // $5 default cap
+ consent_recording: body.consent_recording === 'on' || body.consent_recording === true,
+ consent_terms: body.consent_terms === 'on' || body.consent_terms === true,
+ notify_sms: body.notify_sms === 'on' || body.notify_sms === true,
+ notify_email: body.notify_email === 'on' || body.notify_email === true,
+ notes: String(body.notes || '').slice(0, 500),
+ };
+}
+
+function addCall(body) {
+ const errors = [];
+ if (!body.business_name) errors.push('business_name required');
+ if (!validatePhone(body.business_phone)) errors.push('business_phone is not a valid number');
+ if (!validatePhone(body.callback_phone)) errors.push('callback_phone is not a valid number');
+ if (!body.goal || String(body.goal).trim().length < 8) errors.push('goal is too short (8+ chars required)');
+ if (!body.consent_terms) errors.push('consent_terms must be checked');
+ if (errors.length) return { ok: false, errors };
+
+ const row = sanitizeRow(body);
+ const all = readAll();
+ all.unshift(row);
+ writeAll(all);
+ return { ok: true, call: row };
+}
+
+function listCalls() {
+ return readAll().map(c => ({
+ ...c,
+ // Always-masked for list view
+ account_number: maskAccount(c.account_number),
+ last4_ssn: c.last4_ssn ? '••••' : '',
+ auth_password: c.auth_password ? '••••••' : '',
+ }));
+}
+
+function getCall(id, reveal = false) {
+ const c = readAll().find(x => x.id === id);
+ if (!c) return null;
+ if (reveal) return c;
+ return {
+ ...c,
+ account_number: maskAccount(c.account_number),
+ last4_ssn: c.last4_ssn ? '••••' : '',
+ auth_password: c.auth_password ? '••••••' : '',
+ };
+}
+
+function updateStatus(id, status) {
+ const all = readAll();
+ const idx = all.findIndex(c => c.id === id);
+ if (idx < 0) return null;
+ all[idx].status = status;
+ all[idx].updated_at = new Date().toISOString();
+ writeAll(all);
+ return all[idx];
+}
+
+module.exports = {
+ CATEGORIES, categoryById,
+ validatePhone, sanitizeRow,
+ addCall, listCalls, getCall, updateStatus,
+};
diff --git a/package-lock.json b/package-lock.json
new file mode 100644
index 0000000..c1bb051
--- /dev/null
+++ b/package-lock.json
@@ -0,0 +1,1006 @@
+{
+ "name": "holdforme",
+ "version": "0.1.0",
+ "lockfileVersion": 3,
+ "requires": true,
+ "packages": {
+ "": {
+ "name": "holdforme",
+ "version": "0.1.0",
+ "dependencies": {
+ "dotenv": "^16.6.1",
+ "ejs": "^3.1.10",
+ "express": "^4.22.2",
+ "express-rate-limit": "^7.4.0",
+ "helmet": "^7.1.0",
+ "morgan": "^1.10.0"
+ },
+ "engines": {
+ "node": ">=20"
+ }
+ },
+ "node_modules/accepts": {
+ "version": "1.3.8",
+ "resolved": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz",
+ "integrity": "sha512-PYAthTa2m2VKxuvSD3DPC/Gy+U+sOA1LAuT8mkmRuvw+NACSaeXEQ+NHcVF7rONl6qcaxV3Uuemwawk+7+SJLw==",
+ "license": "MIT",
+ "dependencies": {
+ "mime-types": "~2.1.34",
+ "negotiator": "0.6.3"
+ },
+ "engines": {
+ "node": ">= 0.6"
+ }
+ },
+ "node_modules/array-flatten": {
+ "version": "1.1.1",
+ "resolved": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz",
+ "integrity": "sha512-PCVAQswWemu6UdxsDFFX/+gVeYqKAod3D3UVm91jHwynguOwAvYPhx8nNlM++NqRcK6CxxpUafjmhIdKiHibqg==",
+ "license": "MIT"
+ },
+ "node_modules/async": {
+ "version": "3.2.6",
+ "resolved": "https://registry.npmjs.org/async/-/async-3.2.6.tgz",
+ "integrity": "sha512-htCUDlxyyCLMgaM3xXg0C0LW2xqfuQ6p05pCEIsXuyQ+a1koYKTuBMzRNwmybfLgvJDMd0r1LTn4+E0Ti6C2AA==",
+ "license": "MIT"
+ },
+ "node_modules/balanced-match": {
+ "version": "1.0.2",
+ "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz",
+ "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==",
+ "license": "MIT"
+ },
+ "node_modules/basic-auth": {
+ "version": "2.0.1",
+ "resolved": "https://registry.npmjs.org/basic-auth/-/basic-auth-2.0.1.tgz",
+ "integrity": "sha512-NF+epuEdnUYVlGuhaxbbq+dvJttwLnGY+YixlXlME5KpQ5W3CnXA5cVTneY3SPbPDRkcjMbifrwmFYcClgOZeg==",
+ "license": "MIT",
+ "dependencies": {
+ "safe-buffer": "5.1.2"
+ },
+ "engines": {
+ "node": ">= 0.8"
+ }
+ },
+ "node_modules/basic-auth/node_modules/safe-buffer": {
+ "version": "5.1.2",
+ "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz",
+ "integrity": "sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g==",
+ "license": "MIT"
+ },
+ "node_modules/body-parser": {
+ "version": "1.20.5",
+ "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.5.tgz",
+ "integrity": "sha512-3grm+/2tUOvu2cjJkvsIxrv/wVpfXQW4PsQHYm7yk4vfpu7Ekl6nEsYBoJUL6qDwZUx8wUhQ8tR2qz+ad9c9OA==",
+ "license": "MIT",
+ "dependencies": {
+ "bytes": "~3.1.2",
+ "content-type": "~1.0.5",
+ "debug": "2.6.9",
+ "depd": "2.0.0",
+ "destroy": "~1.2.0",
+ "http-errors": "~2.0.1",
+ "iconv-lite": "~0.4.24",
+ "on-finished": "~2.4.1",
+ "qs": "~6.15.1",
+ "raw-body": "~2.5.3",
+ "type-is": "~1.6.18",
+ "unpipe": "~1.0.0"
+ },
+ "engines": {
+ "node": ">= 0.8",
+ "npm": "1.2.8000 || >= 1.4.16"
+ }
+ },
+ "node_modules/brace-expansion": {
+ "version": "2.1.0",
+ "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.0.tgz",
+ "integrity": "sha512-TN1kCZAgdgweJhWWpgKYrQaMNHcDULHkWwQIspdtjV4Y5aurRdZpjAqn6yX3FPqTA9ngHCc4hJxMAMgGfve85w==",
+ "license": "MIT",
+ "dependencies": {
+ "balanced-match": "^1.0.0"
+ }
+ },
+ "node_modules/bytes": {
+ "version": "3.1.2",
+ "resolved": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz",
+ "integrity": "sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.8"
+ }
+ },
+ "node_modules/call-bind-apply-helpers": {
+ "version": "1.0.2",
+ "resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
+ "integrity": "sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==",
+ "license": "MIT",
+ "dependencies": {
+ "es-errors": "^1.3.0",
+ "function-bind": "^1.1.2"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ }
+ },
+ "node_modules/call-bound": {
+ "version": "1.0.4",
+ "resolved": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz",
+ "integrity": "sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==",
+ "license": "MIT",
+ "dependencies": {
+ "call-bind-apply-helpers": "^1.0.2",
+ "get-intrinsic": "^1.3.0"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
+ "node_modules/content-disposition": {
+ "version": "0.5.4",
+ "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.4.tgz",
+ "integrity": "sha512-FveZTNuGw04cxlAiWbzi6zTAL/lhehaWbTtgluJh4/E95DqMwTmha3KZN1aAWA8cFIhHzMZUvLevkw5Rqk+tSQ==",
+ "license": "MIT",
+ "dependencies": {
+ "safe-buffer": "5.2.1"
+ },
+ "engines": {
+ "node": ">= 0.6"
+ }
+ },
+ "node_modules/content-type": {
+ "version": "1.0.5",
+ "resolved": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz",
+ "integrity": "sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.6"
+ }
+ },
+ "node_modules/cookie": {
+ "version": "0.7.2",
+ "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz",
+ "integrity": "sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.6"
+ }
+ },
+ "node_modules/cookie-signature": {
+ "version": "1.0.7",
+ "resolved": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.7.tgz",
+ "integrity": "sha512-NXdYc3dLr47pBkpUCHtKSwIOQXLVn8dZEuywboCOJY/osA0wFSLlSawr3KN8qXJEyX66FcONTH8EIlVuK0yyFA==",
+ "license": "MIT"
+ },
+ "node_modules/debug": {
+ "version": "2.6.9",
+ "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
+ "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==",
+ "license": "MIT",
+ "dependencies": {
+ "ms": "2.0.0"
+ }
+ },
+ "node_modules/depd": {
+ "version": "2.0.0",
+ "resolved": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz",
+ "integrity": "sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.8"
+ }
+ },
+ "node_modules/destroy": {
+ "version": "1.2.0",
+ "resolved": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz",
+ "integrity": "sha512-2sJGJTaXIIaR1w4iJSNoN0hnMY7Gpc/n8D4qSCJw8QqFWXf7cuAgnEHxBpweaVcPevC2l3KpjYCx3NypQQgaJg==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.8",
+ "npm": "1.2.8000 || >= 1.4.16"
+ }
+ },
+ "node_modules/dotenv": {
+ "version": "16.6.1",
+ "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.6.1.tgz",
+ "integrity": "sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==",
+ "license": "BSD-2-Clause",
+ "engines": {
+ "node": ">=12"
+ },
+ "funding": {
+ "url": "https://dotenvx.com"
+ }
+ },
+ "node_modules/dunder-proto": {
+ "version": "1.0.1",
+ "resolved": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",
+ "integrity": "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==",
+ "license": "MIT",
+ "dependencies": {
+ "call-bind-apply-helpers": "^1.0.1",
+ "es-errors": "^1.3.0",
+ "gopd": "^1.2.0"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ }
+ },
+ "node_modules/ee-first": {
+ "version": "1.1.1",
+ "resolved": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz",
+ "integrity": "sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==",
+ "license": "MIT"
+ },
+ "node_modules/ejs": {
+ "version": "3.1.10",
+ "resolved": "https://registry.npmjs.org/ejs/-/ejs-3.1.10.tgz",
+ "integrity": "sha512-UeJmFfOrAQS8OJWPZ4qtgHyWExa088/MtK5UEyoJGFH67cDEXkZSviOiKRCZ4Xij0zxI3JECgYs3oKx+AizQBA==",
+ "license": "Apache-2.0",
+ "dependencies": {
+ "jake": "^10.8.5"
+ },
+ "bin": {
+ "ejs": "bin/cli.js"
+ },
+ "engines": {
+ "node": ">=0.10.0"
+ }
+ },
+ "node_modules/encodeurl": {
+ "version": "2.0.0",
+ "resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.0.tgz",
+ "integrity": "sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.8"
+ }
+ },
+ "node_modules/es-define-property": {
+ "version": "1.0.1",
+ "resolved": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz",
+ "integrity": "sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.4"
+ }
+ },
+ "node_modules/es-errors": {
+ "version": "1.3.0",
+ "resolved": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz",
+ "integrity": "sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.4"
+ }
+ },
+ "node_modules/es-object-atoms": {
+ "version": "1.1.1",
+ "resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.1.tgz",
+ "integrity": "sha512-FGgH2h8zKNim9ljj7dankFPcICIK9Cp5bm+c2gQSYePhpaG5+esrLODihIorn+Pe6FGJzWhXQotPv73jTaldXA==",
+ "license": "MIT",
+ "dependencies": {
+ "es-errors": "^1.3.0"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ }
+ },
+ "node_modules/escape-html": {
+ "version": "1.0.3",
+ "resolved": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz",
+ "integrity": "sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow==",
+ "license": "MIT"
+ },
+ "node_modules/etag": {
+ "version": "1.8.1",
+ "resolved": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz",
+ "integrity": "sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.6"
+ }
+ },
+ "node_modules/express": {
+ "version": "4.22.2",
+ "resolved": "https://registry.npmjs.org/express/-/express-4.22.2.tgz",
+ "integrity": "sha512-IuL+Elrou2ZvCFHs18/CIzy2Nzvo25nZ1/D2eIZlz7c+QUayAcYoiM2BthCjs+EBHVpjYjcuLDAiCWgeIX3X1Q==",
+ "license": "MIT",
+ "dependencies": {
+ "accepts": "~1.3.8",
+ "array-flatten": "1.1.1",
+ "body-parser": "~1.20.5",
+ "content-disposition": "~0.5.4",
+ "content-type": "~1.0.4",
+ "cookie": "~0.7.1",
+ "cookie-signature": "~1.0.6",
+ "debug": "2.6.9",
+ "depd": "2.0.0",
+ "encodeurl": "~2.0.0",
+ "escape-html": "~1.0.3",
+ "etag": "~1.8.1",
+ "finalhandler": "~1.3.1",
+ "fresh": "~0.5.2",
+ "http-errors": "~2.0.0",
+ "merge-descriptors": "1.0.3",
+ "methods": "~1.1.2",
+ "on-finished": "~2.4.1",
+ "parseurl": "~1.3.3",
+ "path-to-regexp": "~0.1.12",
+ "proxy-addr": "~2.0.7",
+ "qs": "~6.15.1",
+ "range-parser": "~1.2.1",
+ "safe-buffer": "5.2.1",
+ "send": "~0.19.0",
+ "serve-static": "~1.16.2",
+ "setprototypeof": "1.2.0",
+ "statuses": "~2.0.1",
+ "type-is": "~1.6.18",
+ "utils-merge": "1.0.1",
+ "vary": "~1.1.2"
+ },
+ "engines": {
+ "node": ">= 0.10.0"
+ },
+ "funding": {
+ "type": "opencollective",
+ "url": "https://opencollective.com/express"
+ }
+ },
+ "node_modules/express-rate-limit": {
+ "version": "7.5.1",
+ "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-7.5.1.tgz",
+ "integrity": "sha512-7iN8iPMDzOMHPUYllBEsQdWVB6fPDMPqwjBaFrgr4Jgr/+okjvzAy+UHlYYL/Vs0OsOrMkwS6PJDkFlJwoxUnw==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 16"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/express-rate-limit"
+ },
+ "peerDependencies": {
+ "express": ">= 4.11"
+ }
+ },
+ "node_modules/filelist": {
+ "version": "1.0.6",
+ "resolved": "https://registry.npmjs.org/filelist/-/filelist-1.0.6.tgz",
+ "integrity": "sha512-5giy2PkLYY1cP39p17Ech+2xlpTRL9HLspOfEgm0L6CwBXBTgsK5ou0JtzYuepxkaQ/tvhCFIJ5uXo0OrM2DxA==",
+ "license": "Apache-2.0",
+ "dependencies": {
+ "minimatch": "^5.0.1"
+ }
+ },
+ "node_modules/finalhandler": {
+ "version": "1.3.2",
+ "resolved": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.3.2.tgz",
+ "integrity": "sha512-aA4RyPcd3badbdABGDuTXCMTtOneUCAYH/gxoYRTZlIJdF0YPWuGqiAsIrhNnnqdXGswYk6dGujem4w80UJFhg==",
+ "license": "MIT",
+ "dependencies": {
+ "debug": "2.6.9",
+ "encodeurl": "~2.0.0",
+ "escape-html": "~1.0.3",
+ "on-finished": "~2.4.1",
+ "parseurl": "~1.3.3",
+ "statuses": "~2.0.2",
+ "unpipe": "~1.0.0"
+ },
+ "engines": {
+ "node": ">= 0.8"
+ }
+ },
+ "node_modules/forwarded": {
+ "version": "0.2.0",
+ "resolved": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz",
+ "integrity": "sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.6"
+ }
+ },
+ "node_modules/fresh": {
+ "version": "0.5.2",
+ "resolved": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz",
+ "integrity": "sha512-zJ2mQYM18rEFOudeV4GShTGIQ7RbzA7ozbU9I/XBpm7kqgMywgmylMwXHxZJmkVoYkna9d2pVXVXPdYTP9ej8Q==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.6"
+ }
+ },
+ "node_modules/function-bind": {
+ "version": "1.1.2",
+ "resolved": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz",
+ "integrity": "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==",
+ "license": "MIT",
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
+ "node_modules/get-intrinsic": {
+ "version": "1.3.0",
+ "resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz",
+ "integrity": "sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==",
+ "license": "MIT",
+ "dependencies": {
+ "call-bind-apply-helpers": "^1.0.2",
+ "es-define-property": "^1.0.1",
+ "es-errors": "^1.3.0",
+ "es-object-atoms": "^1.1.1",
+ "function-bind": "^1.1.2",
+ "get-proto": "^1.0.1",
+ "gopd": "^1.2.0",
+ "has-symbols": "^1.1.0",
+ "hasown": "^2.0.2",
+ "math-intrinsics": "^1.1.0"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
+ "node_modules/get-proto": {
+ "version": "1.0.1",
+ "resolved": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz",
+ "integrity": "sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==",
+ "license": "MIT",
+ "dependencies": {
+ "dunder-proto": "^1.0.1",
+ "es-object-atoms": "^1.0.0"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ }
+ },
+ "node_modules/gopd": {
+ "version": "1.2.0",
+ "resolved": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz",
+ "integrity": "sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.4"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
+ "node_modules/has-symbols": {
+ "version": "1.1.0",
+ "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz",
+ "integrity": "sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.4"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
+ "node_modules/hasown": {
+ "version": "2.0.3",
+ "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.3.tgz",
+ "integrity": "sha512-ej4AhfhfL2Q2zpMmLo7U1Uv9+PyhIZpgQLGT1F9miIGmiCJIoCgSmczFdrc97mWT4kVY72KA+WnnhJ5pghSvSg==",
+ "license": "MIT",
+ "dependencies": {
+ "function-bind": "^1.1.2"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ }
+ },
+ "node_modules/helmet": {
+ "version": "7.2.0",
+ "resolved": "https://registry.npmjs.org/helmet/-/helmet-7.2.0.tgz",
+ "integrity": "sha512-ZRiwvN089JfMXokizgqEPXsl2Guk094yExfoDXR0cBYWxtBbaSww/w+vT4WEJsBW2iTUi1GgZ6swmoug3Oy4Xw==",
+ "license": "MIT",
+ "engines": {
+ "node": ">=16.0.0"
+ }
+ },
+ "node_modules/http-errors": {
+ "version": "2.0.1",
+ "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.1.tgz",
+ "integrity": "sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==",
+ "license": "MIT",
+ "dependencies": {
+ "depd": "~2.0.0",
+ "inherits": "~2.0.4",
+ "setprototypeof": "~1.2.0",
+ "statuses": "~2.0.2",
+ "toidentifier": "~1.0.1"
+ },
+ "engines": {
+ "node": ">= 0.8"
+ },
+ "funding": {
+ "type": "opencollective",
+ "url": "https://opencollective.com/express"
+ }
+ },
+ "node_modules/iconv-lite": {
+ "version": "0.4.24",
+ "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz",
+ "integrity": "sha512-v3MXnZAcvnywkTUEZomIActle7RXXeedOR31wwl7VlyoXO4Qi9arvSenNQWne1TcRwhCL1HwLI21bEqdpj8/rA==",
+ "license": "MIT",
+ "dependencies": {
+ "safer-buffer": ">= 2.1.2 < 3"
+ },
+ "engines": {
+ "node": ">=0.10.0"
+ }
+ },
+ "node_modules/inherits": {
+ "version": "2.0.4",
+ "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz",
+ "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==",
+ "license": "ISC"
+ },
+ "node_modules/ipaddr.js": {
+ "version": "1.9.1",
+ "resolved": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz",
+ "integrity": "sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.10"
+ }
+ },
+ "node_modules/jake": {
+ "version": "10.9.4",
+ "resolved": "https://registry.npmjs.org/jake/-/jake-10.9.4.tgz",
+ "integrity": "sha512-wpHYzhxiVQL+IV05BLE2Xn34zW1S223hvjtqk0+gsPrwd/8JNLXJgZZM/iPFsYc1xyphF+6M6EvdE5E9MBGkDA==",
+ "license": "Apache-2.0",
+ "dependencies": {
+ "async": "^3.2.6",
+ "filelist": "^1.0.4",
+ "picocolors": "^1.1.1"
+ },
+ "bin": {
+ "jake": "bin/cli.js"
+ },
+ "engines": {
+ "node": ">=10"
+ }
+ },
+ "node_modules/math-intrinsics": {
+ "version": "1.1.0",
+ "resolved": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz",
+ "integrity": "sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.4"
+ }
+ },
+ "node_modules/media-typer": {
+ "version": "0.3.0",
+ "resolved": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz",
+ "integrity": "sha512-dq+qelQ9akHpcOl/gUVRTxVIOkAJ1wR3QAvb4RsVjS8oVoFjDGTc679wJYmUmknUF5HwMLOgb5O+a3KxfWapPQ==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.6"
+ }
+ },
+ "node_modules/merge-descriptors": {
+ "version": "1.0.3",
+ "resolved": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.3.tgz",
+ "integrity": "sha512-gaNvAS7TZ897/rVaZ0nMtAyxNyi/pdbjbAwUpFQpN70GqnVfOiXpeUUMKRBmzXaSQ8DdTX4/0ms62r2K+hE6mQ==",
+ "license": "MIT",
+ "funding": {
+ "url": "https://github.com/sponsors/sindresorhus"
+ }
+ },
+ "node_modules/methods": {
+ "version": "1.1.2",
+ "resolved": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz",
+ "integrity": "sha512-iclAHeNqNm68zFtnZ0e+1L2yUIdvzNoauKU4WBA3VvH/vPFieF7qfRlwUZU+DA9P9bPXIS90ulxoUoCH23sV2w==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.6"
+ }
+ },
+ "node_modules/mime": {
+ "version": "1.6.0",
+ "resolved": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz",
+ "integrity": "sha512-x0Vn8spI+wuJ1O6S7gnbaQg8Pxh4NNHb7KSINmEWKiPE4RKOplvijn+NkmYmmRgP68mc70j2EbeTFRsrswaQeg==",
+ "license": "MIT",
+ "bin": {
+ "mime": "cli.js"
+ },
+ "engines": {
+ "node": ">=4"
+ }
+ },
+ "node_modules/mime-db": {
+ "version": "1.52.0",
+ "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz",
+ "integrity": "sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.6"
+ }
+ },
+ "node_modules/mime-types": {
+ "version": "2.1.35",
+ "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz",
+ "integrity": "sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==",
+ "license": "MIT",
+ "dependencies": {
+ "mime-db": "1.52.0"
+ },
+ "engines": {
+ "node": ">= 0.6"
+ }
+ },
+ "node_modules/minimatch": {
+ "version": "5.1.9",
+ "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-5.1.9.tgz",
+ "integrity": "sha512-7o1wEA2RyMP7Iu7GNba9vc0RWWGACJOCZBJX2GJWip0ikV+wcOsgVuY9uE8CPiyQhkGFSlhuSkZPavN7u1c2Fw==",
+ "license": "ISC",
+ "dependencies": {
+ "brace-expansion": "^2.0.1"
+ },
+ "engines": {
+ "node": ">=10"
+ }
+ },
+ "node_modules/morgan": {
+ "version": "1.10.1",
+ "resolved": "https://registry.npmjs.org/morgan/-/morgan-1.10.1.tgz",
+ "integrity": "sha512-223dMRJtI/l25dJKWpgij2cMtywuG/WiUKXdvwfbhGKBhy1puASqXwFzmWZ7+K73vUPoR7SS2Qz2cI/g9MKw0A==",
+ "license": "MIT",
+ "dependencies": {
+ "basic-auth": "~2.0.1",
+ "debug": "2.6.9",
+ "depd": "~2.0.0",
+ "on-finished": "~2.3.0",
+ "on-headers": "~1.1.0"
+ },
+ "engines": {
+ "node": ">= 0.8.0"
+ }
+ },
+ "node_modules/morgan/node_modules/on-finished": {
+ "version": "2.3.0",
+ "resolved": "https://registry.npmjs.org/on-finished/-/on-finished-2.3.0.tgz",
+ "integrity": "sha512-ikqdkGAAyf/X/gPhXGvfgAytDZtDbr+bkNUJ0N9h5MI/dmdgCs3l6hoHrcUv41sRKew3jIwrp4qQDXiK99Utww==",
+ "license": "MIT",
+ "dependencies": {
+ "ee-first": "1.1.1"
+ },
+ "engines": {
+ "node": ">= 0.8"
+ }
+ },
+ "node_modules/ms": {
+ "version": "2.0.0",
+ "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
+ "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==",
+ "license": "MIT"
+ },
+ "node_modules/negotiator": {
+ "version": "0.6.3",
+ "resolved": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz",
+ "integrity": "sha512-+EUsqGPLsM+j/zdChZjsnX51g4XrHFOIXwfnCVPGlQk/k5giakcKsuxCObBRu6DSm9opw/O6slWbJdghQM4bBg==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.6"
+ }
+ },
+ "node_modules/object-inspect": {
+ "version": "1.13.4",
+ "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",
+ "integrity": "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.4"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
+ "node_modules/on-finished": {
+ "version": "2.4.1",
+ "resolved": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz",
+ "integrity": "sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==",
+ "license": "MIT",
+ "dependencies": {
+ "ee-first": "1.1.1"
+ },
+ "engines": {
+ "node": ">= 0.8"
+ }
+ },
+ "node_modules/on-headers": {
+ "version": "1.1.0",
+ "resolved": "https://registry.npmjs.org/on-headers/-/on-headers-1.1.0.tgz",
+ "integrity": "sha512-737ZY3yNnXy37FHkQxPzt4UZ2UWPWiCZWLvFZ4fu5cueciegX0zGPnrlY6bwRg4FdQOe9YU8MkmJwGhoMybl8A==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.8"
+ }
+ },
+ "node_modules/parseurl": {
+ "version": "1.3.3",
+ "resolved": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz",
+ "integrity": "sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.8"
+ }
+ },
+ "node_modules/path-to-regexp": {
+ "version": "0.1.13",
+ "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.13.tgz",
+ "integrity": "sha512-A/AGNMFN3c8bOlvV9RreMdrv7jsmF9XIfDeCd87+I8RNg6s78BhJxMu69NEMHBSJFxKidViTEdruRwEk/WIKqA==",
+ "license": "MIT"
+ },
+ "node_modules/picocolors": {
+ "version": "1.1.1",
+ "resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz",
+ "integrity": "sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==",
+ "license": "ISC"
+ },
+ "node_modules/proxy-addr": {
+ "version": "2.0.7",
+ "resolved": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz",
+ "integrity": "sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==",
+ "license": "MIT",
+ "dependencies": {
+ "forwarded": "0.2.0",
+ "ipaddr.js": "1.9.1"
+ },
+ "engines": {
+ "node": ">= 0.10"
+ }
+ },
+ "node_modules/qs": {
+ "version": "6.15.1",
+ "resolved": "https://registry.npmjs.org/qs/-/qs-6.15.1.tgz",
+ "integrity": "sha512-6YHEFRL9mfgcAvql/XhwTvf5jKcOiiupt2FiJxHkiX1z4j7WL8J/jRHYLluORvc1XxB5rV20KoeK00gVJamspg==",
+ "license": "BSD-3-Clause",
+ "dependencies": {
+ "side-channel": "^1.1.0"
+ },
+ "engines": {
+ "node": ">=0.6"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
+ "node_modules/range-parser": {
+ "version": "1.2.1",
+ "resolved": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz",
+ "integrity": "sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.6"
+ }
+ },
+ "node_modules/raw-body": {
+ "version": "2.5.3",
+ "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.3.tgz",
+ "integrity": "sha512-s4VSOf6yN0rvbRZGxs8Om5CWj6seneMwK3oDb4lWDH0UPhWcxwOWw5+qk24bxq87szX1ydrwylIOp2uG1ojUpA==",
+ "license": "MIT",
+ "dependencies": {
+ "bytes": "~3.1.2",
+ "http-errors": "~2.0.1",
+ "iconv-lite": "~0.4.24",
+ "unpipe": "~1.0.0"
+ },
+ "engines": {
+ "node": ">= 0.8"
+ }
+ },
+ "node_modules/safe-buffer": {
+ "version": "5.2.1",
+ "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
+ "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==",
+ "funding": [
+ {
+ "type": "github",
+ "url": "https://github.com/sponsors/feross"
+ },
+ {
+ "type": "patreon",
+ "url": "https://www.patreon.com/feross"
+ },
+ {
+ "type": "consulting",
+ "url": "https://feross.org/support"
+ }
+ ],
+ "license": "MIT"
+ },
+ "node_modules/safer-buffer": {
+ "version": "2.1.2",
+ "resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
+ "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==",
+ "license": "MIT"
+ },
+ "node_modules/send": {
+ "version": "0.19.2",
+ "resolved": "https://registry.npmjs.org/send/-/send-0.19.2.tgz",
+ "integrity": "sha512-VMbMxbDeehAxpOtWJXlcUS5E8iXh6QmN+BkRX1GARS3wRaXEEgzCcB10gTQazO42tpNIya8xIyNx8fll1OFPrg==",
+ "license": "MIT",
+ "dependencies": {
+ "debug": "2.6.9",
+ "depd": "2.0.0",
+ "destroy": "1.2.0",
+ "encodeurl": "~2.0.0",
+ "escape-html": "~1.0.3",
+ "etag": "~1.8.1",
+ "fresh": "~0.5.2",
+ "http-errors": "~2.0.1",
+ "mime": "1.6.0",
+ "ms": "2.1.3",
+ "on-finished": "~2.4.1",
+ "range-parser": "~1.2.1",
+ "statuses": "~2.0.2"
+ },
+ "engines": {
+ "node": ">= 0.8.0"
+ }
+ },
+ "node_modules/send/node_modules/ms": {
+ "version": "2.1.3",
+ "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+ "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+ "license": "MIT"
+ },
+ "node_modules/serve-static": {
+ "version": "1.16.3",
+ "resolved": "https://registry.npmjs.org/serve-static/-/serve-static-1.16.3.tgz",
+ "integrity": "sha512-x0RTqQel6g5SY7Lg6ZreMmsOzncHFU7nhnRWkKgWuMTu5NN0DR5oruckMqRvacAN9d5w6ARnRBXl9xhDCgfMeA==",
+ "license": "MIT",
+ "dependencies": {
+ "encodeurl": "~2.0.0",
+ "escape-html": "~1.0.3",
+ "parseurl": "~1.3.3",
+ "send": "~0.19.1"
+ },
+ "engines": {
+ "node": ">= 0.8.0"
+ }
+ },
+ "node_modules/setprototypeof": {
+ "version": "1.2.0",
+ "resolved": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz",
+ "integrity": "sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==",
+ "license": "ISC"
+ },
+ "node_modules/side-channel": {
+ "version": "1.1.0",
+ "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz",
+ "integrity": "sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==",
+ "license": "MIT",
+ "dependencies": {
+ "es-errors": "^1.3.0",
+ "object-inspect": "^1.13.3",
+ "side-channel-list": "^1.0.0",
+ "side-channel-map": "^1.0.1",
+ "side-channel-weakmap": "^1.0.2"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
+ "node_modules/side-channel-list": {
+ "version": "1.0.1",
+ "resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.1.tgz",
+ "integrity": "sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==",
+ "license": "MIT",
+ "dependencies": {
+ "es-errors": "^1.3.0",
+ "object-inspect": "^1.13.4"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
+ "node_modules/side-channel-map": {
+ "version": "1.0.1",
+ "resolved": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz",
+ "integrity": "sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==",
+ "license": "MIT",
+ "dependencies": {
+ "call-bound": "^1.0.2",
+ "es-errors": "^1.3.0",
+ "get-intrinsic": "^1.2.5",
+ "object-inspect": "^1.13.3"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
+ "node_modules/side-channel-weakmap": {
+ "version": "1.0.2",
+ "resolved": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz",
+ "integrity": "sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==",
+ "license": "MIT",
+ "dependencies": {
+ "call-bound": "^1.0.2",
+ "es-errors": "^1.3.0",
+ "get-intrinsic": "^1.2.5",
+ "object-inspect": "^1.13.3",
+ "side-channel-map": "^1.0.1"
+ },
+ "engines": {
+ "node": ">= 0.4"
+ },
+ "funding": {
+ "url": "https://github.com/sponsors/ljharb"
+ }
+ },
+ "node_modules/statuses": {
+ "version": "2.0.2",
+ "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz",
+ "integrity": "sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.8"
+ }
+ },
+ "node_modules/toidentifier": {
+ "version": "1.0.1",
+ "resolved": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz",
+ "integrity": "sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==",
+ "license": "MIT",
+ "engines": {
+ "node": ">=0.6"
+ }
+ },
+ "node_modules/type-is": {
+ "version": "1.6.18",
+ "resolved": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz",
+ "integrity": "sha512-TkRKr9sUTxEH8MdfuCSP7VizJyzRNMjj2J2do2Jr3Kym598JVdEksuzPQCnlFPW4ky9Q+iA+ma9BGm06XQBy8g==",
+ "license": "MIT",
+ "dependencies": {
+ "media-typer": "0.3.0",
+ "mime-types": "~2.1.24"
+ },
+ "engines": {
+ "node": ">= 0.6"
+ }
+ },
+ "node_modules/unpipe": {
+ "version": "1.0.0",
+ "resolved": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz",
+ "integrity": "sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.8"
+ }
+ },
+ "node_modules/utils-merge": {
+ "version": "1.0.1",
+ "resolved": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz",
+ "integrity": "sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.4.0"
+ }
+ },
+ "node_modules/vary": {
+ "version": "1.1.2",
+ "resolved": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz",
+ "integrity": "sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==",
+ "license": "MIT",
+ "engines": {
+ "node": ">= 0.8"
+ }
+ }
+ }
+}
diff --git a/package.json b/package.json
new file mode 100644
index 0000000..ccb811a
--- /dev/null
+++ b/package.json
@@ -0,0 +1,20 @@
+{
+ "name": "holdforme",
+ "version": "0.1.0",
+ "private": true,
+ "description": "HoldForMe — we wait on hold so you don't have to. Customer service complaints, credit limit increases, restaurant reservations, anywhere you'd otherwise burn 47 minutes on hold music.",
+ "main": "server.js",
+ "scripts": {
+ "start": "node server.js",
+ "dev": "node server.js"
+ },
+ "dependencies": {
+ "dotenv": "^16.6.1",
+ "ejs": "^3.1.10",
+ "express": "^4.22.2",
+ "express-rate-limit": "^7.4.0",
+ "helmet": "^7.1.0",
+ "morgan": "^1.10.0"
+ },
+ "engines": { "node": ">=20" }
+}
diff --git a/public/css/site.css b/public/css/site.css
new file mode 100644
index 0000000..a2fec23
--- /dev/null
+++ b/public/css/site.css
@@ -0,0 +1,296 @@
+* { box-sizing: border-box; }
+html, body { margin: 0; padding: 0; }
+body {
+ background: var(--bg); color: var(--text);
+ font-family: var(--font-sans); font-size: 16px; line-height: 1.55;
+ -webkit-font-smoothing: antialiased;
+}
+a { color: var(--link); text-decoration: none; }
+a:hover { color: var(--link-hover); text-decoration: underline; }
+
+h1, h2, h3 { font-family: var(--font-serif); font-weight: 500; letter-spacing: -0.01em; }
+h1 { font-size: clamp(2rem, 4.5vw, 3.2rem); margin: 0 0 .5rem; line-height: 1.1; }
+h2 { font-size: 1.55rem; margin: 1.75rem 0 .75rem; }
+h3 { font-size: 1.2rem; margin: 0 0 .25rem; }
+
+.muted { color: var(--text-muted); }
+.small { font-size: .85rem; }
+
+.wrap { max-width: var(--max-w); margin: 0 auto; padding: 0 1.5rem; }
+.wrap.narrow { max-width: 780px; }
+.section { padding: 3rem 0; }
+.section.alt { background: var(--bg-alt); border-top: 1px solid var(--border); border-bottom: 1px solid var(--border); }
+
+/* Header — logo UL + hamburger UR (gucci anatomy) */
+.site-header {
+ position: fixed; top: 0; left: 0; right: 0; z-index: 50;
+ display: flex; align-items: center; justify-content: space-between;
+ padding: 1rem 1.5rem;
+ background: transparent;
+ transition: background .25s, backdrop-filter .25s, border-color .25s;
+ border-bottom: 1px solid transparent;
+}
+.site-header.scrolled {
+ background: rgba(246,243,236,.94); border-bottom-color: var(--border);
+ backdrop-filter: saturate(140%) blur(8px);
+}
+html[data-theme='dark'] .site-header.scrolled { background: rgba(12,12,16,.94); }
+.brand { display: inline-flex; align-items: center; gap: .6rem; color: #f6f3ec; mix-blend-mode: difference; text-decoration: none; }
+.brand:hover { text-decoration: none; }
+.site-header.scrolled .brand { color: var(--text); mix-blend-mode: normal; }
+.brand-mark {
+ font-size: 1.4rem; background: var(--accent); color: var(--accent-fg);
+ width: 36px; height: 36px; border-radius: 50%;
+ display: inline-flex; align-items: center; justify-content: center;
+}
+.brand-name { font-family: var(--font-serif); font-size: 1.25rem; }
+
+.hamburger {
+ display: inline-flex; flex-direction: column; justify-content: center; align-items: center;
+ width: 44px; height: 44px; background: transparent; border: 1px solid transparent;
+ border-radius: 999px; cursor: pointer; gap: 5px; padding: 0;
+ mix-blend-mode: difference;
+}
+.hamburger span { display: block; width: 22px; height: 2px; background: #f6f3ec; border-radius: 2px; transition: background .25s; }
+.site-header.scrolled .hamburger span { background: var(--text); }
+.site-header.scrolled .hamburger { mix-blend-mode: normal; border-color: var(--border); }
+.hamburger:focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; }
+
+.site-nav {
+ position: fixed; top: 0; right: 0; bottom: 0; width: min(360px, 84vw);
+ background: var(--surface); border-left: 1px solid var(--border);
+ padding: 4.5rem 1.75rem 2rem; z-index: 60;
+ display: flex; flex-direction: column; gap: 1rem;
+ transform: translateX(110%); transition: transform .28s;
+ box-shadow: -8px 0 30px rgba(0,0,0,.18);
+}
+.site-nav[data-open='1'] { transform: translateX(0); }
+.site-nav a { color: var(--text); font-family: var(--font-serif); font-size: 1.45rem; }
+.site-nav a:hover { color: var(--accent); text-decoration: none; }
+.hamburger-close {
+ position: absolute; top: 1rem; right: 1.25rem;
+ background: transparent; border: none; font-size: 2rem; color: var(--text-muted);
+ cursor: pointer; padding: .25rem .5rem;
+}
+.nav-scrim {
+ position: fixed; inset: 0; background: rgba(0,0,0,.45); z-index: 55;
+ opacity: 0; pointer-events: none; transition: opacity .25s;
+}
+.nav-scrim[data-open='1'] { opacity: 1; pointer-events: auto; }
+body.nav-open { overflow: hidden; }
+.theme-toggle {
+ background: transparent; border: 1px solid var(--border);
+ border-radius: 999px; padding: .55rem .85rem; margin-top: auto;
+ color: var(--text); cursor: pointer; font-size: 1rem;
+ display: inline-flex; gap: .4rem; align-items: center;
+}
+.theme-toggle-label { font-size: .8rem; letter-spacing: .03em; text-transform: uppercase; color: var(--text-muted); }
+html[data-theme='light'] .theme-toggle-moon { display: none; }
+html[data-theme='dark'] .theme-toggle-sun { display: none; }
+
+/* Gucci hero with phone-hold animation */
+.hero-gucci {
+ position: relative;
+ min-height: clamp(560px, 92vh, 900px);
+ display: flex; flex-direction: column; align-items: center; justify-content: flex-end;
+ text-align: center;
+ padding: 6rem 1.5rem 5rem;
+ overflow: hidden;
+ color: #f4ecd6;
+ background: #0a0a14;
+}
+.hero-gucci-bg {
+ position: absolute; inset: 0; z-index: 0;
+ background:
+ radial-gradient(ellipse 90% 60% at 50% 30%, rgba(37,69,179,.28) 0%, rgba(10,10,20,0) 60%),
+ radial-gradient(ellipse 70% 50% at 20% 80%, rgba(217,119,6,.18) 0%, rgba(10,10,20,0) 60%),
+ linear-gradient(180deg, #14142a 0%, #0a0a14 60%, #050510 100%);
+}
+.hero-gucci-waves {
+ position: absolute; inset: 0; z-index: 0; pointer-events: none;
+ background:
+ repeating-linear-gradient(90deg,
+ rgba(255,255,255,0) 0px,
+ rgba(255,255,255,0) 38px,
+ rgba(147,181,255,.10) 38px,
+ rgba(147,181,255,.10) 40px),
+ repeating-linear-gradient(0deg,
+ rgba(255,255,255,0) 0px,
+ rgba(255,255,255,0) 100px,
+ rgba(147,181,255,.04) 100px,
+ rgba(147,181,255,.04) 101px);
+ opacity: .7;
+ animation: wave-scroll 32s linear infinite;
+}
+@keyframes wave-scroll { from { background-position: 0 0, 0 0; } to { background-position: -380px 0, 0 -100px; } }
+
+.hero-gucci-stack { position: relative; z-index: 1; display: flex; flex-direction: column; align-items: center; gap: 1.2rem; max-width: 1100px; }
+.hero-gucci-wordmark {
+ font-family: var(--font-serif); font-weight: 400;
+ font-size: clamp(3rem, 9vw, 7rem); line-height: 1; letter-spacing: -0.005em;
+ margin: 0; color: #f7eed2;
+ text-shadow: 0 2px 24px rgba(0,0,0,.6);
+}
+.hero-gucci-tagline {
+ font-family: var(--font-serif); font-style: italic; font-weight: 300;
+ font-size: clamp(1rem, 1.9vw, 1.45rem); color: #d9c89a; margin: 0;
+ max-width: 56ch;
+}
+.hero-gucci-cta { margin-top: 1.5rem; display: flex; gap: .9rem; flex-wrap: wrap; justify-content: center; }
+.hero-gucci-cta .btn.primary { background: #f4ecd6; color: #0a0a14; border-color: transparent; }
+.hero-gucci-cta .btn.primary:hover { background: #93b5ff; color: #0a0a14; }
+.hero-gucci-cta .btn.ghost { color: #f4ecd6; border-color: rgba(244,236,214,.4); background: transparent; }
+.hero-gucci-cta .btn.ghost:hover { background: rgba(244,236,214,.08); border-color: rgba(244,236,214,.8); }
+.hero-gucci-scroll {
+ position: absolute; left: 50%; bottom: 1.5rem; transform: translateX(-50%);
+ width: 38px; height: 38px; border-radius: 50%;
+ display: inline-flex; align-items: center; justify-content: center;
+ color: #d9c89a; border: 1px solid rgba(217,200,154,.4);
+ font-size: 1.1rem; line-height: 1;
+ animation: hero-bob 2.5s ease-in-out infinite; z-index: 2;
+}
+@keyframes hero-bob { 0%,100% { transform: translate(-50%, 0); } 50% { transform: translate(-50%, 6px); } }
+.home .section:first-of-type { padding-top: 0; }
+@media (max-width: 720px) {
+ .hero-gucci { min-height: 80vh; padding: 5rem 1rem 4rem; }
+ .hero-gucci-wordmark { font-size: clamp(2.5rem, 11vw, 4.5rem); }
+}
+
+/* Buttons */
+.btn {
+ display: inline-flex; align-items: center; justify-content: center;
+ padding: .75rem 1.25rem; border-radius: var(--radius);
+ font-family: var(--font-sans); font-size: .95rem; font-weight: 500;
+ cursor: pointer; border: 1px solid transparent;
+ text-decoration: none;
+}
+.btn.primary { background: var(--accent); color: var(--accent-fg); }
+.btn.primary:hover { background: var(--link-hover); color: #fff; text-decoration: none; }
+.btn.ghost { background: transparent; color: var(--text); border-color: var(--border); }
+.btn.ghost:hover { background: var(--bg-alt); text-decoration: none; }
+.btn-small { padding: .35rem .75rem; font-size: .85rem; }
+
+.section-head { display: flex; align-items: baseline; justify-content: space-between; gap: 1rem; margin-bottom: 1.25rem; }
+.two-col { display: grid; grid-template-columns: 1fr 1fr; gap: 2.5rem; }
+@media (max-width: 720px) { .two-col { grid-template-columns: 1fr; } }
+.prose { line-height: 1.65; }
+.prose li { margin-bottom: .35rem; }
+
+/* Category grid (home) */
+.category-grid {
+ display: grid;
+ grid-template-columns: repeat(auto-fill, minmax(220px, 1fr));
+ gap: 1rem;
+}
+.category-card {
+ display: flex; flex-direction: column; gap: .25rem; padding: 1rem 1.1rem;
+ background: var(--surface); border: 1px solid var(--border); border-radius: var(--radius);
+ text-decoration: none; color: var(--text);
+ transition: transform .15s, box-shadow .15s, border-color .15s;
+}
+.category-card:hover { transform: translateY(-2px); box-shadow: var(--shadow); border-color: var(--accent); text-decoration: none; }
+.category-card .category-icon { font-size: 1.8rem; line-height: 1; }
+.category-card strong { font-family: var(--font-serif); font-size: 1.15rem; font-weight: 500; }
+
+/* Form layout */
+.form-header { margin-bottom: 2rem; }
+.form-errors {
+ background: rgba(185,28,28,.08); border: 1px solid var(--red); color: var(--red);
+ padding: 1rem 1.25rem; border-radius: var(--radius); margin-bottom: 1.25rem;
+}
+.form-errors ul { margin: .5rem 0 0; padding-left: 1.5rem; }
+
+.call-form fieldset {
+ border: 1px solid var(--border); border-radius: var(--radius);
+ background: var(--surface); padding: 1.25rem 1.4rem 1.4rem; margin: 0 0 1.5rem;
+}
+.call-form legend {
+ font-family: var(--font-serif); font-weight: 500; font-size: 1.15rem;
+ padding: 0 .5rem; color: var(--text);
+}
+.field { display: flex; flex-direction: column; gap: .25rem; margin-bottom: 1rem; }
+.field-label { font-size: .9rem; font-weight: 500; color: var(--text); display: flex; gap: .5rem; align-items: baseline; }
+.field-label em { font-style: normal; font-size: .75rem; color: var(--amber); font-weight: 600; text-transform: uppercase; letter-spacing: .04em; }
+.field-hint { font-size: .8rem; color: var(--text-muted); margin-top: .15rem; }
+.field input[type=text], .field input[type=tel], .field input[type=email], .field textarea, .field select {
+ background: var(--bg); border: 1px solid var(--border); border-radius: var(--radius);
+ color: var(--text); padding: .65rem .75rem; font: inherit;
+ width: 100%;
+}
+.field textarea { resize: vertical; min-height: 80px; }
+.field input:focus, .field textarea:focus, .field select:focus {
+ outline: 2px solid var(--accent); outline-offset: 1px; border-color: var(--accent);
+}
+.field-row { display: grid; grid-template-columns: 1fr 1fr; gap: 1rem; }
+@media (max-width: 600px) { .field-row { grid-template-columns: 1fr; } }
+
+/* Category radio cards on /new */
+.category-pick {
+ display: grid;
+ grid-template-columns: repeat(auto-fill, minmax(180px, 1fr));
+ gap: .55rem;
+ margin: .5rem 0 0;
+}
+.category-pick-card {
+ display: flex; align-items: center; gap: .55rem;
+ padding: .65rem .75rem;
+ background: var(--bg); border: 1px solid var(--border); border-radius: var(--radius);
+ cursor: pointer;
+ font-size: .92rem;
+ transition: border-color .15s, background .15s, transform .12s;
+}
+.category-pick-card:hover { border-color: var(--accent); }
+.category-pick-card.selected { border-color: var(--accent); background: rgba(37,69,179,.06); }
+.category-pick-card input { position: absolute; opacity: 0; pointer-events: none; }
+.category-pick-icon { font-size: 1.3rem; }
+.category-pick-label { font-weight: 500; }
+
+.check { display: flex; align-items: flex-start; gap: .55rem; padding: .35rem 0; font-size: .95rem; cursor: pointer; }
+.check input[type=checkbox] { margin-top: .25rem; flex-shrink: 0; }
+.check em { font-style: normal; font-size: .75rem; color: var(--amber); font-weight: 600; text-transform: uppercase; letter-spacing: .04em; }
+.check.req { color: var(--text); }
+
+.form-actions { display: flex; gap: .9rem; margin-top: 1rem; }
+
+/* Page heads */
+.page-head { display: flex; align-items: center; justify-content: space-between; gap: 1rem; margin-bottom: 1.5rem; flex-wrap: wrap; }
+.empty-state { padding: 3rem 1rem; text-align: center; }
+
+/* Call list */
+.call-list { list-style: none; padding: 0; margin: 0; display: flex; flex-direction: column; gap: .75rem; }
+.call-row { background: var(--surface); border: 1px solid var(--border); border-radius: var(--radius); transition: transform .15s, box-shadow .15s; }
+.call-row:hover { transform: translateY(-2px); box-shadow: var(--shadow); }
+.call-row-main { display: block; padding: 1rem 1.25rem; color: var(--text); text-decoration: none; }
+.call-row-main:hover { text-decoration: none; }
+.call-row-head { display: flex; justify-content: space-between; align-items: baseline; gap: 1rem; margin-bottom: .3rem; flex-wrap: wrap; }
+.call-row-head strong { font-family: var(--font-serif); font-size: 1.2rem; font-weight: 500; }
+.call-row-goal { margin: .5rem 0 0; color: var(--text-muted); }
+
+.status {
+ display: inline-block; padding: .15rem .55rem; border-radius: 999px;
+ font-size: .72rem; font-weight: 600; letter-spacing: .04em; text-transform: uppercase;
+ background: var(--bg-alt); color: var(--text-muted); border: 1px solid var(--border);
+}
+.status-queued { background: rgba(217,119,6,.12); color: var(--amber); border-color: var(--amber); }
+.status-dialing { background: rgba(217,119,6,.18); color: var(--amber); border-color: var(--amber); }
+.status-on_hold { background: rgba(217,119,6,.20); color: var(--amber); border-color: var(--amber); }
+.status-connected { background: rgba(21,128,61,.12); color: var(--green); border-color: var(--green); }
+.status-done { background: rgba(21,128,61,.10); color: var(--green); border-color: var(--green); }
+.status-failed { background: rgba(185,28,28,.10); color: var(--red); border-color: var(--red); }
+.status-cancelled { background: var(--bg-alt); color: var(--text-muted); border-color: var(--border); }
+
+/* Call detail */
+.call-detail-head { display: flex; gap: 1rem; align-items: center; flex-wrap: wrap; margin-bottom: .25rem; }
+.call-detail-head h1 { margin: 0; }
+.block { margin-top: 2rem; }
+.kv { display: grid; grid-template-columns: max-content 1fr; gap: .35rem 1.25rem; margin: 0; }
+.kv dt { color: var(--text-muted); font-size: .9rem; }
+.kv dd { margin: 0; font-weight: 500; }
+.detail-disclaim { margin-top: 2.5rem; padding-top: 1.25rem; border-top: 1px solid var(--border); }
+.detail-disclaim code { background: var(--bg-alt); padding: .1rem .4rem; border-radius: 4px; font-size: .85rem; }
+
+.site-footer { background: var(--bg-alt); border-top: 1px solid var(--border); padding: 2rem 0; margin-top: 4rem; }
+.site-footer .wrap { padding: 0 1.5rem; }
+.site-footer .wrap p { margin: .25rem 0; }
+.site-footer a { color: var(--text-muted); }
+.site-footer a:hover { color: var(--text); }
diff --git a/public/css/theme.css b/public/css/theme.css
new file mode 100644
index 0000000..80384fa
--- /dev/null
+++ b/public/css/theme.css
@@ -0,0 +1,44 @@
+/* HoldForMe palette — calm cobalt + warm ivory + alert amber.
+ Sense: medical-waiting-room serenity with one sharp accent. */
+
+:root {
+ --font-sans: 'Inter', -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
+ --font-serif: 'Playfair Display', Georgia, 'Times New Roman', serif;
+ --max-w: 1180px;
+ --radius: 6px;
+ --gap: 1.1rem;
+}
+
+html[data-theme='light'] {
+ --bg: #f6f3ec;
+ --bg-alt: #ecdfd5;
+ --surface: #ffffff;
+ --border: #d8cdb9;
+ --text: #18181b;
+ --text-muted:#6b6354;
+ --link: #2545b3;
+ --link-hover:#1a338e;
+ --accent: #2545b3;
+ --accent-fg: #f6f3ec;
+ --amber: #d97706;
+ --green: #15803d;
+ --red: #b91c1c;
+ --shadow: 0 1px 2px rgba(20,15,0,0.06), 0 6px 18px rgba(20,15,0,0.06);
+}
+
+html[data-theme='dark'] {
+ --bg: #0c0c10;
+ --bg-alt: #15151c;
+ --surface: #1c1c25;
+ --border: #2d2d3a;
+ --text: #f1ece1;
+ --text-muted:#a59c87;
+ --link: #93b5ff;
+ --link-hover:#bfd1ff;
+ --accent: #93b5ff;
+ --accent-fg: #0c0c10;
+ --amber: #fbbf24;
+ --green: #4ade80;
+ --red: #f87171;
+ --shadow: 0 1px 2px rgba(0,0,0,0.4), 0 6px 18px rgba(0,0,0,0.4);
+}
diff --git a/public/js/form.js b/public/js/form.js
new file mode 100644
index 0000000..1ef7c49
--- /dev/null
+++ b/public/js/form.js
@@ -0,0 +1,32 @@
+// Form helpers — category radio click-through, goal placeholder presets
+(function () {
+ // Visual feedback when a category radio is selected (CSS .selected toggle).
+ document.querySelectorAll('.category-pick-card').forEach(label => {
+ label.addEventListener('click', () => {
+ document.querySelectorAll('.category-pick-card.selected').forEach(el => el.classList.remove('selected'));
+ label.classList.add('selected');
+ const id = label.querySelector('input[type=radio]')?.value;
+ if (!id) return;
+ fetch('/api/category/' + encodeURIComponent(id))
+ .then(r => r.ok ? r.json() : null)
+ .then(j => {
+ if (!j || !j.category) return;
+ const goalEl = document.querySelector('textarea[name=goal]');
+ // Replace placeholder + value if the user hasn't typed anything yet
+ if (goalEl && !goalEl.value && j.category.defaultGoal) {
+ goalEl.placeholder = j.category.defaultGoal;
+ }
+ })
+ .catch(() => { /* non-fatal */ });
+ });
+ });
+
+ // Phone-number formatting (US) on blur
+ document.querySelectorAll('input[type=tel]').forEach(el => {
+ el.addEventListener('blur', () => {
+ const digits = el.value.replace(/\D/g, '');
+ if (digits.length === 10) el.value = `(${digits.slice(0,3)}) ${digits.slice(3,6)}-${digits.slice(6)}`;
+ else if (digits.length === 11 && digits[0] === '1') el.value = `+1 (${digits.slice(1,4)}) ${digits.slice(4,7)}-${digits.slice(7)}`;
+ });
+ });
+})();
diff --git a/public/js/hamburger.js b/public/js/hamburger.js
new file mode 100644
index 0000000..8c20852
--- /dev/null
+++ b/public/js/hamburger.js
@@ -0,0 +1,28 @@
+(function () {
+ const header = document.querySelector('.site-header');
+ const btn = document.getElementById('hamburger');
+ const nav = document.getElementById('site-nav');
+ const close = document.getElementById('hamburger-close');
+ const scrim = document.getElementById('nav-scrim');
+
+ function setOpen(open) {
+ if (!nav || !btn) return;
+ nav.dataset.open = open ? '1' : '';
+ btn.setAttribute('aria-expanded', String(!!open));
+ nav.setAttribute('aria-hidden', String(!open));
+ if (scrim) {
+ if (open) scrim.removeAttribute('hidden');
+ scrim.dataset.open = open ? '1' : '';
+ }
+ document.body.classList.toggle('nav-open', !!open);
+ }
+ btn && btn.addEventListener('click', () => setOpen(nav.dataset.open !== '1'));
+ close && close.addEventListener('click', () => setOpen(false));
+ scrim && scrim.addEventListener('click', () => setOpen(false));
+ document.addEventListener('keydown', e => { if (e.key === 'Escape') setOpen(false); });
+ nav && nav.querySelectorAll('a').forEach(a => a.addEventListener('click', () => setTimeout(() => setOpen(false), 80)));
+
+ function onScroll() { if (!header) return; header.classList.toggle('scrolled', window.scrollY > 64); }
+ window.addEventListener('scroll', onScroll, { passive: true });
+ onScroll();
+})();
diff --git a/public/js/theme-toggle.js b/public/js/theme-toggle.js
new file mode 100644
index 0000000..4f7b5c1
--- /dev/null
+++ b/public/js/theme-toggle.js
@@ -0,0 +1,10 @@
+(function () {
+ const btn = document.getElementById('theme-toggle');
+ if (!btn) return;
+ btn.addEventListener('click', () => {
+ const cur = document.documentElement.getAttribute('data-theme');
+ const nxt = cur === 'dark' ? 'light' : 'dark';
+ document.documentElement.setAttribute('data-theme', nxt);
+ try { localStorage.setItem('hfm-theme', nxt); } catch (_) {}
+ });
+})();
diff --git a/routes/public.js b/routes/public.js
new file mode 100644
index 0000000..5f8e575
--- /dev/null
+++ b/routes/public.js
@@ -0,0 +1,85 @@
+const express = require('express');
+const router = express.Router();
+const data = require('../lib/data');
+
+router.use((req, res, next) => {
+ res.locals.site_title = 'HoldForMe';
+ res.locals.path = req.path;
+ next();
+});
+
+// Home — hero + CTA
+router.get('/', (req, res) => {
+ res.render('public/home', {
+ title: 'HoldForMe — We wait on hold so you don\'t have to',
+ meta_desc: 'Skip the hold music. Submit who to call and what you need done; we wait, you live your life. Credit cards, hospitals, restaurants, anywhere there\'s a queue.',
+ });
+});
+
+// New-call form — full onboarding
+router.get('/new', (req, res) => {
+ res.render('public/new', {
+ title: 'Start a call — HoldForMe',
+ meta_desc: 'Tell us who to call and what to get done. We\'ll wait on hold, then connect you when an agent picks up.',
+ categories: data.CATEGORIES,
+ preset: data.categoryById(req.query.category) || null,
+ form: {}, // empty form
+ errors: [],
+ });
+});
+
+// Submit a new call
+router.post('/new', (req, res) => {
+ const r = data.addCall(req.body || {});
+ if (!r.ok) {
+ return res.status(400).render('public/new', {
+ title: 'Start a call — HoldForMe',
+ meta_desc: 'Tell us who to call and what to get done.',
+ categories: data.CATEGORIES,
+ preset: data.categoryById(req.body.category) || null,
+ form: req.body || {},
+ errors: r.errors,
+ });
+ }
+ res.redirect('/calls/' + r.call.id);
+});
+
+// Your queue
+router.get('/calls', (req, res) => {
+ res.render('public/calls', {
+ title: 'Your call queue — HoldForMe',
+ meta_desc: 'Calls you\'ve queued up. Status, history, results.',
+ calls: data.listCalls(),
+ });
+});
+
+// Single call detail
+router.get('/calls/:id', (req, res) => {
+ const id = req.params.id;
+ if (!/^[A-Za-z0-9_-]{6,16}$/.test(id)) return res.status(404).render('public/404', { title: 'Not found — HoldForMe' });
+ // Reveal only if explicitly requested via ?reveal=1 — keeps sensitive fields
+ // hidden by default even on the detail page
+ const c = data.getCall(id, req.query.reveal === '1');
+ if (!c) return res.status(404).render('public/404', { title: 'Not found — HoldForMe' });
+ res.render('public/call', {
+ title: c.business_name + ' — call detail — HoldForMe',
+ meta_desc: 'Call status and submitted details.',
+ call: c,
+ revealed: req.query.reveal === '1',
+ });
+});
+
+// JSON API for the form's category-picker → field hints
+router.get('/api/category/:id', (req, res) => {
+ const c = data.categoryById(req.params.id);
+ if (!c) return res.status(404).json({ ok: false });
+ res.json({ ok: true, category: c });
+});
+
+router.get('/how-it-works', (req, res) => {
+ res.render('public/how', { title: 'How it works — HoldForMe', meta_desc: 'How HoldForMe waits on hold for you.' });
+});
+
+router.get('/healthz', (req, res) => res.type('text').send('ok'));
+
+module.exports = router;
diff --git a/server.js b/server.js
new file mode 100644
index 0000000..65d86d5
--- /dev/null
+++ b/server.js
@@ -0,0 +1,82 @@
+require('dotenv').config();
+
+const express = require('express');
+const path = require('path');
+const morgan = require('morgan');
+const helmet = require('helmet');
+const rateLimit = require('express-rate-limit');
+
+const publicRoutes = require('./routes/public');
+
+const app = express();
+const PORT = parseInt(process.env.PORT || '9932', 10);
+const PUBLIC_URL = process.env.PUBLIC_URL || `http://localhost:${PORT}`;
+const IS_PROD = process.env.NODE_ENV === 'production';
+
+app.set('trust proxy', 1);
+app.set('view engine', 'ejs');
+app.set('views', path.join(__dirname, 'views'));
+app.disable('x-powered-by');
+
+// Security baseline (per dw-site-build standing rule, 2026-05-12)
+app.use(helmet({
+ contentSecurityPolicy: {
+ directives: {
+ defaultSrc: ["'self'"],
+ scriptSrc: ["'self'", "'unsafe-inline'"],
+ styleSrc: ["'self'", "'unsafe-inline'", 'https://fonts.googleapis.com'],
+ imgSrc: ["'self'", 'data:', 'https:'],
+ fontSrc: ["'self'", 'https://fonts.gstatic.com', 'data:'],
+ connectSrc: ["'self'"],
+ frameAncestors: ["'none'"],
+ objectSrc: ["'none'"],
+ baseUri: ["'self'"],
+ formAction: ["'self'"],
+ upgradeInsecureRequests: [],
+ },
+ },
+ strictTransportSecurity: { maxAge: 31536000, includeSubDomains: true, preload: true },
+ referrerPolicy: { policy: 'strict-origin-when-cross-origin' },
+}));
+app.use((req, res, next) => {
+ res.setHeader('Permissions-Policy', 'geolocation=(), microphone=(), camera=(), payment=()');
+ next();
+});
+
+// Rate limiting — 200/min/IP global, 20/min/IP on /api (submission flood guard)
+app.use(rateLimit({ windowMs: 60_000, max: 200, standardHeaders: 'draft-7', legacyHeaders: false }));
+app.use('/api', rateLimit({ windowMs: 60_000, max: 20 }));
+
+app.use(morgan(IS_PROD ? 'combined' : 'dev'));
+app.use(express.json({ limit: '64kb' }));
+app.use(express.urlencoded({ extended: true, limit: '64kb' }));
+
+app.use(express.static(path.join(__dirname, 'public'), {
+ maxAge: '1h',
+ setHeaders(res, p) {
+ if (p.endsWith('.html')) res.setHeader('Cache-Control', 'no-store, must-revalidate');
+ },
+}));
+
+app.use((req, res, next) => {
+ res.locals.PUBLIC_URL = PUBLIC_URL;
+ next();
+});
+
+app.use('/', publicRoutes);
+
+app.use((req, res) => {
+ res.status(404).render('public/404', { title: 'Not found — HoldForMe' });
+});
+
+app.use((err, req, res, next) => {
+ console.error('[error]', err && err.stack ? err.stack : err);
+ res.status(500).render('public/error', {
+ title: 'Server error — HoldForMe',
+ message: 'Something went wrong.',
+ });
+});
+
+app.listen(PORT, () => {
+ console.log(`holdforme listening on :${PORT} (${IS_PROD ? 'prod' : 'dev'})`);
+});
diff --git a/views/partials/footer.ejs b/views/partials/footer.ejs
new file mode 100644
index 0000000..d83f531
--- /dev/null
+++ b/views/partials/footer.ejs
@@ -0,0 +1,17 @@
+<footer class="site-footer">
+ <div class="wrap">
+ <p class="muted small">
+ © <span id="yr"></span> HoldForMe ·
+ <a href="/how-it-works">How it works</a> ·
+ <a href="/calls">Your calls</a>
+ </p>
+ <p class="muted small">
+ We never call on your behalf without your explicit submission. Recorded calls happen only with your "consent_recording" checkbox + applicable state law.
+ </p>
+ </div>
+ <script>document.getElementById('yr').textContent = new Date().getFullYear();</script>
+ <script src="/js/hamburger.js" defer></script>
+ <script src="/js/theme-toggle.js" defer></script>
+</footer>
+</body>
+</html>
diff --git a/views/partials/head.ejs b/views/partials/head.ejs
new file mode 100644
index 0000000..902eb43
--- /dev/null
+++ b/views/partials/head.ejs
@@ -0,0 +1,24 @@
+<!doctype html>
+<html lang="en">
+<head>
+ <meta charset="utf-8">
+ <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
+ <title><%= title %></title>
+ <meta name="description" content="<%= typeof meta_desc !== 'undefined' ? meta_desc : '' %>">
+ <link rel="preconnect" href="https://fonts.googleapis.com">
+ <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+ <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Playfair+Display:ital,wght@0,400;0,500;1,400&family=Inter:wght@400;500;600;700&display=swap">
+ <link rel="stylesheet" href="/css/theme.css">
+ <link rel="stylesheet" href="/css/site.css">
+ <script>
+ // Anti-flash theme — read storage before paint
+ (function(){
+ try {
+ var t = localStorage.getItem('hfm-theme');
+ if (!t) t = window.matchMedia('(prefers-color-scheme: dark)').matches ? 'dark' : 'light';
+ document.documentElement.setAttribute('data-theme', t);
+ } catch (_) { document.documentElement.setAttribute('data-theme','light'); }
+ })();
+ </script>
+</head>
+<body>
diff --git a/views/partials/header.ejs b/views/partials/header.ejs
new file mode 100644
index 0000000..851d957
--- /dev/null
+++ b/views/partials/header.ejs
@@ -0,0 +1,25 @@
+<header class="site-header" data-transparent="true">
+ <a class="brand" href="/" aria-label="HoldForMe home">
+ <span class="brand-mark" aria-hidden="true">⏱</span>
+ <span class="brand-name">HoldForMe</span>
+ </a>
+
+ <button id="hamburger" class="hamburger" type="button"
+ aria-label="Open menu" aria-expanded="false" aria-controls="site-nav">
+ <span></span><span></span><span></span>
+ </button>
+
+ <nav id="site-nav" class="site-nav" aria-hidden="true">
+ <button id="hamburger-close" class="hamburger-close" type="button" aria-label="Close menu">×</button>
+ <a href="/">Home</a>
+ <a href="/new">Start a call</a>
+ <a href="/calls">Your calls</a>
+ <a href="/how-it-works">How it works</a>
+ <button id="theme-toggle" class="theme-toggle" type="button" aria-label="Toggle dark / light theme">
+ <span class="theme-toggle-sun">☀</span>
+ <span class="theme-toggle-moon">☾</span>
+ <span class="theme-toggle-label">Theme</span>
+ </button>
+ </nav>
+ <div id="nav-scrim" class="nav-scrim" hidden></div>
+</header>
diff --git a/views/public/404.ejs b/views/public/404.ejs
new file mode 100644
index 0000000..c4ab386
--- /dev/null
+++ b/views/public/404.ejs
@@ -0,0 +1,11 @@
+<%- include('../partials/head', { title }) %>
+<%- include('../partials/header') %>
+<main class="error-page">
+ <section class="section">
+ <div class="wrap narrow">
+ <h1>404 — not found</h1>
+ <p>That page isn't here. <a href="/">Back to home</a>.</p>
+ </div>
+ </section>
+</main>
+<%- include('../partials/footer') %>
diff --git a/views/public/call.ejs b/views/public/call.ejs
new file mode 100644
index 0000000..6220844
--- /dev/null
+++ b/views/public/call.ejs
@@ -0,0 +1,74 @@
+<%- include('../partials/head', { title, meta_desc }) %>
+<%- include('../partials/header') %>
+
+<main class="call-detail">
+ <section class="section">
+ <div class="wrap narrow">
+ <p class="muted small"><a href="/calls">← All calls</a></p>
+
+ <header class="call-detail-head">
+ <h1><%= call.business_name %></h1>
+ <span class="status status-<%= call.status %>"><%= call.status %></span>
+ </header>
+
+ <p class="muted">
+ <%= call.category_label %> · <%= call.business_phone %> · queued <%= call.created_at.replace('T',' ').slice(0,16) %>
+ </p>
+
+ <section class="block">
+ <h2>Goal</h2>
+ <p class="prose"><%= call.goal %></p>
+ <% if (call.notes) { %>
+ <h3>Notes for the rep</h3>
+ <p class="prose"><%= call.notes %></p>
+ <% } %>
+ </section>
+
+ <section class="block">
+ <h2>Account info</h2>
+ <% if (!revealed) { %>
+ <p class="muted small">Masked by default. <a class="btn ghost btn-small" href="?reveal=1">Reveal (this view only)</a></p>
+ <% } else { %>
+ <p class="muted small"><a class="btn ghost btn-small" href="?">Re-mask</a></p>
+ <% } %>
+ <dl class="kv">
+ <% if (call.account_number) { %><dt>Account number</dt><dd><%= call.account_number %></dd><% } %>
+ <% if (call.last4_ssn) { %><dt>Last 4 SSN</dt><dd><%= call.last4_ssn %></dd><% } %>
+ <% if (call.billing_zip) { %><dt>Billing ZIP</dt><dd><%= call.billing_zip %></dd><% } %>
+ <% if (call.date_of_birth) { %><dt>DOB</dt><dd><%= call.date_of_birth %></dd><% } %>
+ <% if (call.auth_password) { %><dt>Verbal auth</dt><dd><%= call.auth_password %></dd><% } %>
+ <% if (!call.account_number && !call.last4_ssn && !call.billing_zip && !call.date_of_birth && !call.auth_password) { %>
+ <dt>—</dt><dd>No account info submitted</dd>
+ <% } %>
+ </dl>
+ </section>
+
+ <section class="block">
+ <h2>Callback</h2>
+ <dl class="kv">
+ <dt>Name</dt><dd><%= call.callback_name || '—' %></dd>
+ <dt>Phone</dt><dd><%= call.callback_phone || '—' %></dd>
+ <dt>Email</dt><dd><%= call.callback_email || '—' %></dd>
+ <dt>Best time</dt><dd><%= call.best_time_window || '—' %></dd>
+ </dl>
+ </section>
+
+ <section class="block">
+ <h2>Limits & consent</h2>
+ <dl class="kv">
+ <dt>Max hold</dt><dd><%= call.max_hold_minutes %> min</dd>
+ <dt>Max spend</dt><dd>$<%= (call.max_spend_cents/100).toFixed(2) %></dd>
+ <dt>Recording</dt><dd><%= call.consent_recording ? '✓ consented' : '— not consented (no recording)' %></dd>
+ <dt>SMS notify</dt><dd><%= call.notify_sms ? '✓ on' : '—' %></dd>
+ <dt>Email notify</dt><dd><%= call.notify_email ? '✓ on' : '—' %></dd>
+ </dl>
+ </section>
+
+ <p class="muted small detail-disclaim">
+ Phase 1 MVP — this captures the submission. Phase 2 wires Twilio Voice for the actual dial + hold-wait + bridge-on-pickup. Status here is currently <code><%= call.status %></code>.
+ </p>
+ </div>
+ </section>
+</main>
+
+<%- include('../partials/footer') %>
diff --git a/views/public/calls.ejs b/views/public/calls.ejs
new file mode 100644
index 0000000..efe766b
--- /dev/null
+++ b/views/public/calls.ejs
@@ -0,0 +1,40 @@
+<%- include('../partials/head', { title, meta_desc }) %>
+<%- include('../partials/header') %>
+
+<main class="calls-page">
+ <section class="section">
+ <div class="wrap">
+ <header class="page-head">
+ <h1>Your call queue</h1>
+ <a class="btn primary" href="/new">Start a new call →</a>
+ </header>
+
+ <% if (!calls.length) { %>
+ <div class="empty-state">
+ <p class="muted">No calls yet. <a href="/new">Queue your first call →</a></p>
+ </div>
+ <% } else { %>
+ <ul class="call-list">
+ <% calls.forEach(function(c) { %>
+ <li class="call-row">
+ <a class="call-row-main" href="/calls/<%= c.id %>">
+ <div class="call-row-head">
+ <strong><%= c.business_name %></strong>
+ <span class="status status-<%= c.status %>"><%= c.status %></span>
+ </div>
+ <p class="muted small">
+ <%= c.category_label %> ·
+ <%= c.business_phone %> ·
+ queued <%= c.created_at.slice(0,16).replace('T',' ') %>
+ </p>
+ <p class="call-row-goal"><%= c.goal.length > 140 ? c.goal.slice(0,140)+'…' : c.goal %></p>
+ </a>
+ </li>
+ <% }); %>
+ </ul>
+ <% } %>
+ </div>
+ </section>
+</main>
+
+<%- include('../partials/footer') %>
diff --git a/views/public/error.ejs b/views/public/error.ejs
new file mode 100644
index 0000000..561b8d6
--- /dev/null
+++ b/views/public/error.ejs
@@ -0,0 +1,12 @@
+<%- include('../partials/head', { title }) %>
+<%- include('../partials/header') %>
+<main class="error-page">
+ <section class="section">
+ <div class="wrap narrow">
+ <h1>Something went wrong</h1>
+ <p><%= message %></p>
+ <p><a href="/">Back to home</a>.</p>
+ </div>
+ </section>
+</main>
+<%- include('../partials/footer') %>
diff --git a/views/public/home.ejs b/views/public/home.ejs
new file mode 100644
index 0000000..461255e
--- /dev/null
+++ b/views/public/home.ejs
@@ -0,0 +1,108 @@
+<%- include('../partials/head', { title, meta_desc }) %>
+<%- include('../partials/header') %>
+
+<main class="home">
+ <section class="hero-gucci" aria-labelledby="hero-wordmark">
+ <div class="hero-gucci-bg" role="img" aria-label="Phone-hold abstract ground"></div>
+ <div class="hero-gucci-waves" aria-hidden="true"></div>
+ <div class="hero-gucci-stack">
+ <h1 id="hero-wordmark" class="hero-gucci-wordmark">HoldForMe</h1>
+ <p class="hero-gucci-tagline"><em>Skip the hold music. We wait — you live your life.</em></p>
+ <div class="hero-gucci-cta">
+ <a class="btn primary" href="/new">Start a call →</a>
+ <a class="btn ghost" href="/how-it-works">How it works</a>
+ </div>
+ </div>
+ <a class="hero-gucci-scroll" href="#use-cases" aria-label="Scroll for use cases">↓</a>
+ </section>
+
+ <section class="section" id="use-cases">
+ <div class="wrap">
+ <div class="section-head">
+ <h2>Pick a use case</h2>
+ <a class="muted" href="/new">Start any call →</a>
+ </div>
+ <p class="muted" style="max-width:760px;margin:.25rem 0 1.5rem">
+ The most common queues we wait on. Pick one and we'll preset the right fields for you — or pick "Something else" and tell us yourself.
+ </p>
+
+ <div class="category-grid">
+ <a class="category-card" href="/new?category=credit-card-increase">
+ <span class="category-icon">💳</span>
+ <strong>Credit card</strong>
+ <span class="muted small">Limit increase, dispute a charge</span>
+ </a>
+ <a class="category-card" href="/new?category=hospital-billing">
+ <span class="category-icon">🏥</span>
+ <strong>Hospital</strong>
+ <span class="muted small">Billing dispute, schedule appointment</span>
+ </a>
+ <a class="category-card" href="/new?category=restaurant-reservation">
+ <span class="category-icon">🍽️</span>
+ <strong>Restaurant</strong>
+ <span class="muted small">Reservation at a hard-to-book spot</span>
+ </a>
+ <a class="category-card" href="/new?category=airline-change">
+ <span class="category-icon">✈️</span>
+ <strong>Airline</strong>
+ <span class="muted small">Change a flight, request refund</span>
+ </a>
+ <a class="category-card" href="/new?category=cable-cancel">
+ <span class="category-icon">📡</span>
+ <strong>Cable / wireless</strong>
+ <span class="muted small">Cancel, dispute, retention call</span>
+ </a>
+ <a class="category-card" href="/new?category=insurance-claim">
+ <span class="category-icon">🛡️</span>
+ <strong>Insurance</strong>
+ <span class="muted small">Claim status, denial appeal</span>
+ </a>
+ <a class="category-card" href="/new?category=utility-dispute">
+ <span class="category-icon">⚡</span>
+ <strong>Utility</strong>
+ <span class="muted small">Dispute a bill, set up service</span>
+ </a>
+ <a class="category-card" href="/new?category=warranty-claim">
+ <span class="category-icon">🔧</span>
+ <strong>Warranty</strong>
+ <span class="muted small">File a claim, schedule repair</span>
+ </a>
+ <a class="category-card" href="/new?category=mortgage-loan">
+ <span class="category-icon">🏦</span>
+ <strong>Mortgage / loan</strong>
+ <span class="muted small">Payoff, hardship, refi questions</span>
+ </a>
+ <a class="category-card" href="/new?category=subscription-cancel">
+ <span class="category-icon">🔁</span>
+ <strong>Subscription</strong>
+ <span class="muted small">Cancel, get a refund</span>
+ </a>
+ <a class="category-card" href="/new?category=other">
+ <span class="category-icon">☎️</span>
+ <strong>Something else</strong>
+ <span class="muted small">Anywhere there's a queue</span>
+ </a>
+ </div>
+ </div>
+ </section>
+
+ <section class="section alt">
+ <div class="wrap two-col">
+ <div>
+ <h2>The deal</h2>
+ <ol class="prose">
+ <li><strong>You submit one form.</strong> Who to call, what you need, account info if the rep will ask.</li>
+ <li><strong>We dial and wait.</strong> Our system holds through the queue — could be 5 minutes, could be 47. Hold music doesn't bother us.</li>
+ <li><strong>When a human answers, your phone rings.</strong> You jump in fresh, with your goal and account info on screen. No 90-second context dump required.</li>
+ </ol>
+ </div>
+ <div>
+ <h2>What this is not</h2>
+ <p>We don't impersonate you. We don't read your password to a stranger. We don't promise to fix what only you can authorize.</p>
+ <p class="muted">For calls where you'd rather not be on the line at all (low-stakes reservations, simple cancellations), Phase 2 will support an AI voice agent that speaks your script — opt-in only, with full transcript.</p>
+ </div>
+ </div>
+ </section>
+</main>
+
+<%- include('../partials/footer') %>
diff --git a/views/public/how.ejs b/views/public/how.ejs
new file mode 100644
index 0000000..9190cd3
--- /dev/null
+++ b/views/public/how.ejs
@@ -0,0 +1,48 @@
+<%- include('../partials/head', { title, meta_desc }) %>
+<%- include('../partials/header') %>
+
+<main class="how-page">
+ <section class="section">
+ <div class="wrap narrow">
+ <p class="muted small"><a href="/">← Home</a></p>
+ <h1>How it works</h1>
+
+ <h2>What you do</h2>
+ <ol class="prose">
+ <li>Pick a use case on the home page (or skip to <a href="/new">Start a call</a>).</li>
+ <li>Fill in <strong>who to call</strong> (business + their number), <strong>what you want done</strong> (the goal), and any <strong>account info</strong> the rep will ask for.</li>
+ <li>Leave your callback number. Hit submit.</li>
+ </ol>
+
+ <h2>What we do</h2>
+ <ol class="prose">
+ <li><strong>We dial.</strong> Our system places the call on your behalf, sits through the IVR menu, picks the right options.</li>
+ <li><strong>We wait.</strong> 5 minutes, 47 minutes, doesn't matter — hold music is not a problem for us. You go live your life.</li>
+ <li><strong>We detect a human.</strong> When a real agent answers — based on tone, language pattern, and the absence of hold music — we ring your phone.</li>
+ <li><strong>You take it from there.</strong> You jump on the call with the rep already greeting you, your account info on screen, no 90-second context dump required.</li>
+ </ol>
+
+ <h2>What we don't do</h2>
+ <ul class="prose">
+ <li><strong>We don't impersonate you.</strong> Until you join the call, we're a queue-walker — silent or politely confirming "yes I'm still here" when prompted.</li>
+ <li><strong>We don't authorize anything.</strong> If the rep needs a password / SSN / approval, we wait for you.</li>
+ <li><strong>We don't record without consent.</strong> If you check the recording-consent box, recording happens with the state-law-appropriate disclosure to the rep. If you don't, no recording.</li>
+ </ul>
+
+ <h2>What's next (Phase 2)</h2>
+ <p>Phase 2 wires up Twilio Voice for actual dial + hold-wait + bridge-on-pickup, plus an <strong>opt-in AI voice agent</strong> for low-stakes calls where you'd rather not be on the line at all — reservation bookings, simple cancellations. Full transcript provided. No impersonation without explicit per-call opt-in.</p>
+
+ <h2>Pricing (planned)</h2>
+ <ul class="prose">
+ <li>Free tier: 1 call/month, max 30-min hold</li>
+ <li>$9/mo: 10 calls/mo, max 90-min hold each, SMS + email summary</li>
+ <li>$29/mo: unlimited calls, AI voice agent included, priority queue</li>
+ </ul>
+
+ <h2>Legal</h2>
+ <p>You authorize HoldForMe to place outbound calls on your behalf to the specific number you submit, for the specific purpose you describe. We follow TCPA, CAN-SPAM, applicable two-party-recording laws, and the business's own rules around third-party callers. We never share your account info with anyone except the business you ask us to call, and only when the rep asks for it.</p>
+ </div>
+ </section>
+</main>
+
+<%- include('../partials/footer') %>
diff --git a/views/public/new.ejs b/views/public/new.ejs
new file mode 100644
index 0000000..a56ad96
--- /dev/null
+++ b/views/public/new.ejs
@@ -0,0 +1,161 @@
+<%- include('../partials/head', { title, meta_desc }) %>
+<%- include('../partials/header') %>
+
+<main class="new-call">
+ <section class="section">
+ <div class="wrap narrow">
+ <header class="form-header">
+ <p class="muted small"><a href="/">← Home</a></p>
+ <h1>Start a call</h1>
+ <p class="muted">Tell us who to call and what you need done. Fields that look sensitive are sensitive — we mask them in lists and only show them on this call's detail page when you click "Reveal".</p>
+ </header>
+
+ <% if (errors && errors.length) { %>
+ <div class="form-errors">
+ <strong>Fix these:</strong>
+ <ul>
+ <% errors.forEach(function(e) { %><li><%= e %></li><% }); %>
+ </ul>
+ </div>
+ <% } %>
+
+ <form method="POST" action="/new" class="call-form" autocomplete="off">
+
+ <fieldset>
+ <legend>1. What kind of call</legend>
+ <p class="muted small">Pick the closest fit. The form below adjusts to show what's typically needed.</p>
+ <div class="category-pick">
+ <% categories.forEach(function(c) {
+ var selected = preset ? (preset.id === c.id) : (form.category === c.id);
+ %>
+ <label class="category-pick-card <%= selected ? 'selected' : '' %>">
+ <input type="radio" name="category" value="<%= c.id %>" <%= selected ? 'checked' : '' %> required>
+ <span class="category-pick-icon"><%= c.icon %></span>
+ <span class="category-pick-label"><%= c.label %></span>
+ </label>
+ <% }); %>
+ </div>
+ </fieldset>
+
+ <fieldset>
+ <legend>2. Who to call</legend>
+ <label class="field">
+ <span class="field-label">Business name <em>required</em></span>
+ <input type="text" name="business_name" value="<%= form.business_name || '' %>" maxlength="120" placeholder="e.g. Chase Sapphire customer service" required>
+ </label>
+ <label class="field">
+ <span class="field-label">Phone number to call <em>required</em></span>
+ <input type="tel" name="business_phone" value="<%= form.business_phone || '' %>" maxlength="20" placeholder="1-800-..." required>
+ <span class="field-hint">US format works. International numbers — use full E.164 (+44...).</span>
+ </label>
+ </fieldset>
+
+ <fieldset>
+ <legend>3. What you want done</legend>
+ <label class="field">
+ <span class="field-label">The goal of the call <em>required, ≥8 chars</em></span>
+ <textarea name="goal" rows="5" maxlength="1500" placeholder="<%= preset && preset.defaultGoal ? preset.defaultGoal : 'Be specific. \\\'Request credit limit increase from $5,000 to $10,000\\\' is better than \\\'help with credit card\\\'.' %>" required><%= form.goal || (preset && preset.defaultGoal) || '' %></textarea>
+ </label>
+ <label class="field">
+ <span class="field-label">Anything else the rep should know <span class="muted">— optional</span></span>
+ <textarea name="notes" rows="3" maxlength="500" placeholder="Context, history, prior case numbers, etc."><%= form.notes || '' %></textarea>
+ </label>
+ </fieldset>
+
+ <fieldset>
+ <legend>4. Account info <span class="muted">(only if the rep will ask)</span></legend>
+ <p class="muted small">Stored encrypted-at-rest in Phase 2; masked in all list views. Only shown on this call's detail page when you click Reveal.</p>
+ <div class="field-row">
+ <label class="field">
+ <span class="field-label">Account number</span>
+ <input type="text" name="account_number" value="<%= form.account_number || '' %>" maxlength="40" placeholder="Last 4 minimum, full if needed" autocomplete="off">
+ </label>
+ <label class="field">
+ <span class="field-label">Last 4 of SSN</span>
+ <input type="text" name="last4_ssn" value="<%= form.last4_ssn || '' %>" maxlength="4" inputmode="numeric" pattern="\d{4}" placeholder="1234" autocomplete="off">
+ </label>
+ </div>
+ <div class="field-row">
+ <label class="field">
+ <span class="field-label">Billing ZIP</span>
+ <input type="text" name="billing_zip" value="<%= form.billing_zip || '' %>" maxlength="5" inputmode="numeric" pattern="\d{5}" placeholder="90210" autocomplete="off">
+ </label>
+ <label class="field">
+ <span class="field-label">Date of birth</span>
+ <input type="text" name="date_of_birth" value="<%= form.date_of_birth || '' %>" maxlength="10" placeholder="MM/DD/YYYY" autocomplete="off">
+ </label>
+ </div>
+ <label class="field">
+ <span class="field-label">Verbal-auth password / security answer</span>
+ <input type="text" name="auth_password" value="<%= form.auth_password || '' %>" maxlength="60" placeholder='e.g. "Maiden name: Smith"' autocomplete="off">
+ <span class="field-hint">Some lines ask "what's your verbal password?" — give it here and we'll have it ready.</span>
+ </label>
+ </fieldset>
+
+ <fieldset>
+ <legend>5. How to reach you back</legend>
+ <div class="field-row">
+ <label class="field">
+ <span class="field-label">Your name <em>required</em></span>
+ <input type="text" name="callback_name" value="<%= form.callback_name || '' %>" maxlength="80" required>
+ </label>
+ <label class="field">
+ <span class="field-label">Your phone <em>required</em></span>
+ <input type="tel" name="callback_phone" value="<%= form.callback_phone || '' %>" maxlength="20" placeholder="for the bridge when a human picks up" required>
+ </label>
+ </div>
+ <label class="field">
+ <span class="field-label">Your email <span class="muted">— optional</span></span>
+ <input type="email" name="callback_email" value="<%= form.callback_email || '' %>" maxlength="120">
+ </label>
+ <label class="field">
+ <span class="field-label">Best time window <span class="muted">— optional</span></span>
+ <input type="text" name="best_time_window" value="<%= form.best_time_window || '' %>" maxlength="60" placeholder='e.g. "weekdays 9am-6pm PT"'>
+ </label>
+ </fieldset>
+
+ <fieldset>
+ <legend>6. Limits</legend>
+ <div class="field-row">
+ <label class="field">
+ <span class="field-label">Max hold time</span>
+ <select name="max_hold_minutes">
+ <option value="15" <%= form.max_hold_minutes === '15' ? 'selected' : '' %>>15 min — quick try</option>
+ <option value="30" <%= form.max_hold_minutes === '30' ? 'selected' : '' %>>30 min</option>
+ <option value="60" <%= !form.max_hold_minutes || form.max_hold_minutes === '60' ? 'selected' : '' %>>60 min (default)</option>
+ <option value="120" <%= form.max_hold_minutes === '120' ? 'selected' : '' %>>2 hours</option>
+ <option value="180" <%= form.max_hold_minutes === '180' ? 'selected' : '' %>>3 hours (worst-case insurance/IRS)</option>
+ </select>
+ </label>
+ <label class="field">
+ <span class="field-label">Max spend (¢)</span>
+ <select name="max_spend_cents">
+ <option value="100" <%= form.max_spend_cents === '100' ? 'selected' : '' %>>$1.00</option>
+ <option value="250" <%= form.max_spend_cents === '250' ? 'selected' : '' %>>$2.50</option>
+ <option value="500" <%= !form.max_spend_cents || form.max_spend_cents === '500' ? 'selected' : '' %>>$5.00 (default)</option>
+ <option value="1000" <%= form.max_spend_cents === '1000' ? 'selected' : '' %>>$10.00</option>
+ <option value="2500" <%= form.max_spend_cents === '2500' ? 'selected' : '' %>>$25.00</option>
+ </select>
+ </label>
+ </div>
+ </fieldset>
+
+ <fieldset>
+ <legend>7. Notifications & consent</legend>
+ <label class="check"><input type="checkbox" name="notify_sms" <%= form.notify_sms === 'on' ? 'checked' : 'checked' %>> Text me when an agent picks up</label>
+ <label class="check"><input type="checkbox" name="notify_email" <%= form.notify_email === 'on' ? 'checked' : '' %>> Email me the call summary afterwards</label>
+ <label class="check"><input type="checkbox" name="consent_recording" <%= form.consent_recording === 'on' ? 'checked' : '' %>>I consent to recording the call (recording laws vary by state; we follow two-party-consent where required)</label>
+ <label class="check req"><input type="checkbox" name="consent_terms" <%= form.consent_terms === 'on' ? 'checked' : '' %> required> I authorize HoldForMe to dial the business number on my behalf and bridge me when a human answers <em>required</em></label>
+ </fieldset>
+
+ <div class="form-actions">
+ <button type="submit" class="btn primary">Queue this call →</button>
+ <a class="btn ghost" href="/">Cancel</a>
+ </div>
+ </form>
+ </div>
+ </section>
+</main>
+
+<%- include('../partials/footer') %>
+<script src="/js/form.js" defer></script>
(oldest)
·
back to Butlr
·
polish: (1) 44-business preset directory across 13 categorie c889dbb →