Creative ideas + design notes
Commits with substantial prose (≥120 chars) — the rationale behind each move.
323ecdb · 2026-09-05 · TK-11260: HOTSPOT_PROVIDER dispatcher + openai fallback, backfill 14 empty-hotspot rooms
Gemini AI Studio prepay is still depleted (confirmed live 429
RESOURCE_EXHAUSTED), so the 12 Flux-regenerated room scenes from TK-10402
plus steelcase-office/mid-century-room stayed at hotspots=[] (rendered but
not shoppable). Mirrors the existing SCENE_PROVIDER pattern (lib/scene.js):
lib/hotspots.js is now a thin dispatcher over lib/hotspot-providers/{gemini,openai}.js,
same {locateProducts, COST_PER_CALL} contract, so server.js and
backfill-room-scenes.js are untouched.
Ran scripts/backfill-hotspots.js (new, hotspots-only — ~10x cheaper than a
full scene regen) with HOTSPOT_PROVIDER=openai against the LOCAL dev DB:
14 rooms updated, $0.07 total (gpt-5.2 vision, ~$0.005/room). 13/14 rooms
now carry at least one hotspot; "room" got a genuine 0-match (frontend
edge-chip fallback covers it, same as Gemini's own omit-if-unsure behavior).
Ledgered as reversible (undo = UPDATE rooms SET hotspots='[]' for the 14
slugs) at ~/.claude/yolo-queue/executed-reversible/ledger.jsonl.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VAXbNq4CYRmd9hRam2NU6P
156ccf7 · 2026-09-04 · TK-10402: undo script for Flux room-scene backfill
12 NULL room scene_images regenerated via Replicate-Flux fallback (Gemini
prepay depleted). This reverts scene_image->NULL + deletes the generated PNGs.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EgcJfyrTaPp4vJYtptSXGG
9c27c31 · 2026-09-04 · deploy: guard prod-only runtime data from rsync --delete
deploy.sh runs 'rsync -az --delete' with no data/ exclude, so a deploy
overwrote the box's runtime file with the local copy and destroyed
everything written since the last deploy. Added a surgical
RSYNC_EXTRA_EXCLUDES for this project's runtime path(s) only, so genuine
build artifacts under data/ keep syncing.
Verified by itemized rsync --dry-run against prod: the runtime file is
listed for transfer WITHOUT the exclude and absent WITH it.
Fleet sweep, TK-11227. Same bug class as the July 2026 artmura/quadrille
mis-target fix and the abramsagency lead-ledger fix (TK-10536).
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013mq9RQtVZZEWvreDqqTgv2
abbea82 · 2026-09-03 · TK-10402: route guide heroes through the SCENE_PROVIDER dispatcher + add spend caps
The documented Flux runbook was broken for the guides half: gen-guide-heroes.js
called the Gemini endpoint directly and silently ignored SCENE_PROVIDER, so
`SCENE_PROVIDER=replicate-flux node scripts/gen-guide-heroes.js` would have failed
once per guide against the depleted Gemini key (~109 failures, prod scope).
- lib/scene-providers/{gemini,replicate-flux}.js: add generateEditorial({subject})
-> {buffer, cost}. Gemini's prompt text is byte-identical to the inline one it
replaces, so the default path is unchanged.
- lib/scene.js: export generateEditorial through the dispatcher.
- scripts/gen-guide-heroes.js: use scene.generateEditorial (provider-agnostic).
- lib/run-guard.js (new): shared --dry-run / --limit / --max-cost parsing so a cap
behaves identically across both paid drivers.
- both drivers: --dry-run ($0 target list + estimate), --max-cost hard cap (default
$12, pre-flight abort + per-image stop), and a consecutive-failure abort so an
unfunded credential can't emit the same error once per row across the batch.
Verified $0: dry-runs on both drivers, cap abort, default provider still gemini
($0.039), replicate-flux dispatch resolves, node --check on all touched files,
server.js + lib/roomgen unaffected. No provider call made; ticket stays gated on
Steve's spend + funded credential.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011X4xabTP7zwUuN7zeDPfbJ
1a8e5c7 · 2026-08-27 · TK-10402: AbortSignal 30s timeout + ok-check on Flux image download (inert path hardening)
Prevents a hung Replicate CDN download from wedging the batch indefinitely;
adds an explicit HTTP-status check. No behavior change on the funded path,
no spend (fallback stays inert until a REPLICATE_API_TOKEN is routed).
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
797a158 · 2026-08-25 · chore: refactor review (clean, no changes), v0.5.0 (session close)
Session added the SCENE_PROVIDER seam + Flux-Kontext fallback (50e7120) — a
backward-compatible feature, default gemini unchanged. javascript-pro refactor pass:
no edits warranted. Steve chose the no-Gemini path; Flux fallback stays inert until a
REPLICATE_API_TOKEN is funded (Steve-gated).
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
50e7120 · 2026-08-25 · TK-10402: pluggable scene-provider seam + Flux-Kontext fallback (inert until funded)
Extracts the Gemini nano-banana impl behind a SCENE_PROVIDER dispatcher (lib/scene.js)
so a depleted provider is a one-flag flip. Default=gemini is byte-identical ($0.039,
same output path/contract) — backfill-room-scenes.js + lib/roomgen untouched.
Adds lib/scene-providers/replicate-flux.js: reference-capable (keeps 'real product in
the room'), throws a clear actionable error + spends nothing until a REPLICATE_API_TOKEN
is funded. Gemini prepay top-up remains the recommended path.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
3407b7f · 2026-08-10 · fix(TK-10390): guide image fallback — no more imageless guides after reconcile
The 257-path reconcile NULLed 107 guides.hero_image, leaving guides imageless
(JSON-LD Article.image dropped, og:image -> logo, home/index cards blank) — a
real SEO/social regression cre-agent's contrarian gate caught (M-00475).
Option A (render-layer, $0): guides now fall back to a representative product
image (first non-suppressed product of the guide) — exactly like rooms fall back
to product thumbs. Applied to all 3 surfaces: detail route (Article.image +
og:image + visible hero via guideImg), home guide-strip + /guides index (via a
first-product-image subquery). data-hide-on-error still guards the img.
Verified: fallback subquery returns real product images 5/5 guides; absUrl passes
external CDN URLs through unchanged (no double-prefix); simulated prod-NULL path
-> product image; syntax OK, routes 200; guides WITH a real hero unchanged.
Deploy gated -> pending-approval.
c6f5c6b · 2026-08-10 · TK-10390: reconcile-dead-images.js — dry-run tool to NULL dead scene_image/hero_image paths
Finds rooms.scene_image / guides.hero_image pointing to a missing local file and,
with --apply (GATED prod write, snapshot-first + single transaction), NULLs them so
pages fall back cleanly and the dead path leaves the OG/JSON-LD image tags too.
Dry-run by default, read-only. Interim cleanup; proper fix = regenerate the missing
PNGs (claude-email's roomgen lane). Verified: syntax OK, local dry-run reports clean.
63069ec · 2026-08-09 · fix: graceful-degrade broken guide-hero + room-scene images (interim)
Interim mitigation for TK-10390 (150 auto-rooms + some guide heroes point to
/img/rooms/*.png files that don't exist -> broken-image icons on /room/:slug,
/guides, and home). Root-cause regeneration stays claude-email's auto-room lane.
- imgfallback.js: data-hide-on-error now hides the whole figure.room-scene-wrap
when a .room-scene img fails (so the hotspot layer doesn't float over an empty
box); other opt-in imgs hide themselves as before.
- sceneFigure (render.js) + 3 guide-hero <img> sites (home/guides/detail): added
data-hide-on-error.
- No-op for images that load; complementary to regeneration (not conflicting).
Verified in real Chrome: broke a scene src -> figure display:none, roomThumbs
rail stays visible, valid images unaffected. Deploy GATED -> pending-approval.
23f8ed4 · 2026-08-09 · fix(csp): allow static.cloudflareinsights.com in public script-src
CF auto-injects its Web-Analytics beacon on the proxied zone; the strict
public script-src ('self' + googletagmanager) was blocking it -> a CSP
console error on every page. Added the CF Insights origin (public only;
/admin unchanged). Verified: public CSP now lists the origin, /admin still
'unsafe-inline'-only, server boots clean.
cb035b8 · 2026-08-09 · hardening: branded 404 page + remove orphan public/js/cart.js
- 404 handler was a bare 'Not found / back to showroom' line; now a branded
Error-404 page with helpful destinations (Shop/Rooms/Build/Guides), inline
styles matching the footer pattern (no CSP/style-src impact), reusing layout
header+footer. Verified: /nope -> 404 status + new copy, home still 200.
- public/js/cart.js was dead scaffolding from the initial generic-ecommerce
base — loaded by no script (this is an affiliate showroom; click-through is
/go, there is no cart/checkout). Removed; moodboard.js comment de-referenced.
- /shop no-results state already handled (server.js grid-empty); sitemap
lastmod left as-is (guides/rooms already carry accurate lastmod; fabricating
static-page dates would be an SEO-negative, not an improvement).
Deploy to Kamatera is GATED -> drafted to pending-approval.
0e28b93 · 2026-08-03 · GA4 under strict CSP: allow-list gtag.js origin + self-host inline bootstrap (/js/ga.js, deferred)
The parallel GA4 injection (bc6f4d9) added an external googletagmanager.com script
+ an INLINE gtag config to the layout head — both blocked by C11's script-src 'self'
(dead analytics on next reload). Fix keeps the CSP strict: allow-list
www.googletagmanager.com for the library, move the inline bootstrap to a self-hosted
deferred /js/ga.js so 'self' admits it (no 'unsafe-inline' reintroduced). connect-src
left intentionally open (documented) so GA4 regional beacons keep working — enumerating
them is brittle. Cody-gated, verified live (CSP header, ga.js 200+deferred, 0 inline gtag).
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
181743c · 2026-08-03 · deploy: schema-migration step + /shop smoke test (stop code-ahead-of-schema)
Prevents a repeat of the 2026-08-03 regression where shipped code referenced a
prod-missing column (products.suppressed) + tables (affiliate_settings,
suppress_rules) and /shop 500'd while the DB-blind /healthz smoke test stayed
green.
- db/schema.sql: explicit ADD COLUMN IF NOT EXISTS guards (inline, before
dependent indexes) so the file is a complete idempotent migration on a fresh
OR drifted DB, not just a fresh-create.
- scripts/migrate.sh: applies schema.sql with ON_ERROR_STOP; loads DATABASE_URL
from the remote's own .env.
- .deploy.conf: BUILD_CMD runs the migration on the remote after install/before
reload; HEALTH_URL now hits /shop (exercises the real catalog query, not the
DB-blind /healthz); INSTALL_CMD bakes in the sharp-safe (scripts-enabled) install.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
ffa8079 · 2026-08-03 · chore: v0.3.0 — keyword/id suppression feature (session close)
Author: session that shipped 72708fc (admin Suppress page). Version bump only;
working-tree edits to lib/rooms.js/routes/admin.js/server.js + new lib/ids.js belong
to a concurrent session and are intentionally left uncommitted.
aae117f · 2026-08-03 · harden: intOrNull() guard on client-supplied ids reaching bigint columns
Non-numeric wall_paint_id (and similar) now coerces to null instead of
Number()->NaN reaching a bigint query and throwing a 500. Applied at
/api/rooms and /api/render call sites. (Pre-existing working-tree change,
snapshotted before deploy so shipped code == committed code.)
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
78c986b · 2026-08-03 · store: date + time added on product cards — New badge + 'Added …' line
Every storefront product card now shows when it was added to the store: a NEW
badge over the image for items added in the last 14 days (exact date+time in the
hover title), plus a muted, dated 'Added Mon D, YYYY, H:MM AM' line under the
price. New shared addedStamp() helper in render.js mirrors the admin when()
format; card-new + card-added styles added to site.css. Chosen treatment per
2026-08-03 decision (overrides the usual 'customer cards omit created date').
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
72708fc · 2026-08-03 · admin: keyword/id suppression rules (Suppress page) + Vacuum re-apply + Refresh
- New suppress_rules table (durable keyword/id hide rules, distinct from source-level
affiliate_settings and the raw suppressed flag).
- /admin/suppress: enter keywords (and/or ids) -> immediately flip suppressed=TRUE on
every current match (title/brand/advertiser). Reuses the pervasive NOT suppressed gate
so hides propagate to /shop, /rooms, guides, and the sitemap.
- Vacuum re-applies all rules (catches products ingested later matching an old keyword);
Refresh reloads/recounts; View shop -> /shop?room=decor&style=modern.
- Per-rule live match/hidden counts, created date+time, Re-apply, Remove, Remove+unhide.
- Verified end-to-end: add velvet (7 hidden), storefront drop confirmed, vacuum idempotent,
remove+unhide restores state; CSRF guard returns 403.
82f2795 · 2026-08-03 · admin: per-product click analytics column (total, 7d, last-clicked date)
Fold click aggregates into the products query via one grouped LEFT JOIN and
render a Clicks column per row — lifetime total, a 7-day sub-count, and the
last-clicked timestamp (dated with the standard when() helper). No-click
products show a muted — instead of fake zeros.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
3e86ee5 · 2026-08-03 · IDS admin: implement EZ-Join DTD verdict (C+relabel), fix smart-quote regression, sync rooms.hotspots schema (v0.2.1)
- EZ-Join verdict C-as-superset-of-A: joinTarget() resolves a per-network
marketplace SEARCH deep-link (brand pre-filled) where searchVerified, else the
plain landing (safe fallback). All networks land today (unverified); flip
searchVerified per network after a live test. Honest relabel 'EZ Join' ->
'Join via <Network>'.
- Fix: refactor pass had introduced curly quotes as HTML attr delimiters on the
join button (class="ezjoin"/href broke styling+link) — restored straight quotes.
- db/rooms.sql: declare + idempotently ALTER-add the hotspots JSONB column that
createRoom() writes (schema file was drifted from the live DB).
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
562d723 · 2026-08-03 · chore: lint, refactor, v0.2.0 (session close)
Lint: colon-safe Basic-auth parse. Refactor (behavior-preserving): move
AFFILIATE_ENABLED const above buildWhere; NUL->KEY_SEP; chip param key->netKey;
dedup joinedNets label. Verified: auth 401/200, /shop + affiliates + suggested
200, toggle round-trip. Minor bump — session shipped the affiliate on/off admin.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
33bf504 · 2026-08-03 · IDS admin: confirm CJ PID 101848244, drop bogus 1062321 (TK-10171)
.env CJ_WEBSITE_ID=101848244 matches the PID in the live tracking links, so CJ
attribution is correct. 1062321 was identified as a FileMaker customer acct
(client Claire, Shopify order #32749), not a CJ id — removed from the record.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
8fb23cd · 2026-08-03 · IDS admin: record CJ account identifiers on Affiliates tab (TK-10171)
Adds a CJ Account reference bar to /admin/affiliates from data/cj-account.json:
login steve@designerwallcoverings.com, CID 7896980, live-link PID 101848244
(all evidence-confirmed). 1062321 shown as 'unverified' — it matches neither the
CID nor the PID in the live click-[PID]-[AID] tracking links, so it is NOT wired
into anything pending confirmation under CJ Account > Websites.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
95495fd · 2026-08-03 · IDS admin: 'Suggested lines to join' affiliate tab (TK-10171)
Adds a second tab under /admin/affiliates: a curated gap-finder of on-brand
home/decor affiliate programs across CJ + other networks. Flags lines already
in the catalog as Joined, gives an EZ Join deep-link into the right network's
marketplace for the rest, filterable by network. Roster is data-driven
(data/suggested-affiliates.json), read live so it extends without a restart.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
590fca7 · 2026-08-03 · shop: collapse facet rail on load, 4-across grid + columns slider, mood-board project select
- facet rail -> native <details>, all collapsed on load (auto-opens only the group holding an active filter)
- grid controls: columns slider (2-6, default 4) driving #grid via --gcols; grid starts 4-across even pre-JS
- sort: date/color/style/brand/title/price all present (Newest relabelled 'Date - Newest')
- mood board -> named PROJECTS: #mbProjectSel switcher, create/switch, per-project item lists; legacy single board migrated to 'My Board'
e5ef1c4 · 2026-08-03 · feat: shop-time Mood Board — collect pieces while shopping, assemble, one button turns them into a photoreal room setting
- public/js/moodboard.js: self-contained client feature (mirrors cart.js). Injects a Mood Board button on every product card, floating FAB + slide-in drawer that assembles all selections, a star-Primary toggle, room-type picker, and a Create Room Setting button that POSTs the selected ids to the existing /api/render (Gemini 2.5 Flash Image, ~$0.039) and shows the rendered room + shoppable pieces inline
- lib/render.js: load moodboard.js globally so selection works site-wide (shop, rooms, home, looks)
- Primary piece is sent first so it anchors the room (scene refs the first 4 pieces)
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
47e1b8d · 2026-08-01 · room page: 3x-larger click-to-shop thumbnails (info + Buy on click); big thumbs are the shop surface on scene-less rooms so they no longer dead-end
- roomThumbs: each thumb is now a <button> that expands product info (brand/title/price) + a tracked Buy button inline, instead of jumping straight out to the affiliate link
- thumbs 56px -> 168px (3x); new /js/room-thumbs.js toggle (one-open, Esc/outside-click closes), mirrors hotspot-card grammar
- server room route: render the big thumbs as the shoppable surface when a room has no scene_image (fixes glam-room dead-end); scene rooms unchanged (scene + side rail + grid)
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
d55b94c · 2026-08-01 · Add faceted filtering (room/style/color/price) to /shop + /rooms
- lib/catalog.js: URL-addressable filters, self-excluding facet counts, active chips
- every facet is a real drillable /shop?... link (data-points-href-to-deeper-data rule)
- verified locally: room/color filters narrow the grid, chips clear individually
5637f88 · 2026-08-01 · Add gated /admin curation dashboard + dotenv env loading
- routes/admin.js: basic-auth (timing-safe), featured-toggle, guide publish/unpublish,
click analytics (top-clicked, 7-day counts), created date+time chips per admin-card rule
- server.js loads .env via dotenv (CJ_COMPANY_ID etc.); admin router mounted
- verified: /admin 401 unauth / 200 authed, timestamps render, existing routes intact
619c451 · 2026-08-01 · Add 4 credential-gated feed adapters (CJ, Amazon PA-API v5, Rakuten, ShareASale) + ingest orchestrator
- Each adapter implements the shared {network, enabled(env), fetch(env,{limit})} contract,
maps its network's API into the unified rawProduct shape, uses only node built-ins
(global fetch + crypto for SigV4/HMAC), and returns [] when creds absent (never throws)
- scripts/ingest.js runs enabled adapters -> normalize -> UPSERT; idempotent, cron-safe
- .env.example documents every network's required credentials
- Verified: registry loads all 4, ingest skips all gracefully with no creds
7f2672c · 2026-08-01 · Scaffold interiordesignershowroom: multi-network affiliate showroom foundation
- Express + Postgres, unified product contract (normalize.js) feeding one catalog
from 4 networks (CJ/Amazon/Rakuten/ShareASale) with room/style/color classifier
- Showroom home, /shop + /rooms grids with sort+density, editorial buying guides
- /go/:id affiliate redirect w/ click logging, FTC disclosure baked into shell,
SEO (canonical/OG/JSON-LD/sitemap), legal pages
- Seeded 24 sample products + 2 guides; running under pm2 on :9861