[object Object]

← back to Mfr Review Viewer

initial scaffold (gitify-all 2026-05-06)

aacc009769c8b31b152dd84372c1e55658dcdae3 · 2026-05-06 10:25:42 -0700 · Steve Abrams

Files touched

Diff

commit aacc009769c8b31b152dd84372c1e55658dcdae3
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Wed May 6 10:25:42 2026 -0700

    initial scaffold (gitify-all 2026-05-06)
---
 .gitignore        |  12 +
 package-lock.json | 837 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
 package.json      |  16 ++
 server.js         | 532 ++++++++++++++++++++++++++++++++++
 4 files changed, 1397 insertions(+)

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..7e6a9c3
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,12 @@
+node_modules/
+.env
+.env.local
+.env.*.local
+.env.*
+tmp/
+*.log
+.DS_Store
+dist/
+build/
+.next/
+*.bak
diff --git a/package-lock.json b/package-lock.json
new file mode 100644
index 0000000..610fb0d
--- /dev/null
+++ b/package-lock.json
@@ -0,0 +1,837 @@
+{
+  "name": "mfr-review-viewer",
+  "version": "1.0.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "mfr-review-viewer",
+      "version": "1.0.0",
+      "license": "ISC",
+      "dependencies": {
+        "express": "^5.2.1",
+        "helmet": "^8.1.0"
+      }
+    },
+    "node_modules/accepts": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/accepts/-/accepts-2.0.0.tgz",
+      "integrity": "sha512-5cvg6CtKwfgdmVqY1WIiXKc3Q1bkRqGLi+2W/6ao+6Y7gu/RCwRuAhGEzh5B4KlszSuTLgZYuqFqo5bImjNKng==",
+      "license": "MIT",
+      "dependencies": {
+        "mime-types": "^3.0.0",
+        "negotiator": "^1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/body-parser": {
+      "version": "2.2.2",
+      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-2.2.2.tgz",
+      "integrity": "sha512-oP5VkATKlNwcgvxi0vM0p/D3n2C3EReYVX+DNYs5TjZFn/oQt2j+4sVJtSMr18pdRr8wjTcBl6LoV+FUwzPmNA==",
+      "license": "MIT",
+      "dependencies": {
+        "bytes": "^3.1.2",
+        "content-type": "^1.0.5",
+        "debug": "^4.4.3",
+        "http-errors": "^2.0.0",
+        "iconv-lite": "^0.7.0",
+        "on-finished": "^2.4.1",
+        "qs": "^6.14.1",
+        "raw-body": "^3.0.1",
+        "type-is": "^2.0.1"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/bytes": {
+      "version": "3.1.2",
+      "resolved": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz",
+      "integrity": "sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/call-bind-apply-helpers": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
+      "integrity": "sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==",
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0",
+        "function-bind": "^1.1.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/call-bound": {
+      "version": "1.0.4",
+      "resolved": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz",
+      "integrity": "sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bind-apply-helpers": "^1.0.2",
+        "get-intrinsic": "^1.3.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/content-disposition": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-1.1.0.tgz",
+      "integrity": "sha512-5jRCH9Z/+DRP7rkvY83B+yGIGX96OYdJmzngqnw2SBSxqCFPd0w2km3s5iawpGX8krnwSGmF0FW5Nhr0Hfai3g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/content-type": {
+      "version": "1.0.5",
+      "resolved": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz",
+      "integrity": "sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/cookie": {
+      "version": "0.7.2",
+      "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz",
+      "integrity": "sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/cookie-signature": {
+      "version": "1.2.2",
+      "resolved": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.2.2.tgz",
+      "integrity": "sha512-D76uU73ulSXrD1UXF4KE2TMxVVwhsnCgfAyTg9k8P6KGZjlXKrOLe4dJQKI3Bxi5wjesZoFXJWElNWBjPZMbhg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.6.0"
+      }
+    },
+    "node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+      "license": "MIT",
+      "dependencies": {
+        "ms": "^2.1.3"
+      },
+      "engines": {
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/depd": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz",
+      "integrity": "sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/dunder-proto": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",
+      "integrity": "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bind-apply-helpers": "^1.0.1",
+        "es-errors": "^1.3.0",
+        "gopd": "^1.2.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/ee-first": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz",
+      "integrity": "sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==",
+      "license": "MIT"
+    },
+    "node_modules/encodeurl": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.0.tgz",
+      "integrity": "sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/es-define-property": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz",
+      "integrity": "sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/es-errors": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz",
+      "integrity": "sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/es-object-atoms": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.1.tgz",
+      "integrity": "sha512-FGgH2h8zKNim9ljj7dankFPcICIK9Cp5bm+c2gQSYePhpaG5+esrLODihIorn+Pe6FGJzWhXQotPv73jTaldXA==",
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/escape-html": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz",
+      "integrity": "sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow==",
+      "license": "MIT"
+    },
+    "node_modules/etag": {
+      "version": "1.8.1",
+      "resolved": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz",
+      "integrity": "sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/express": {
+      "version": "5.2.1",
+      "resolved": "https://registry.npmjs.org/express/-/express-5.2.1.tgz",
+      "integrity": "sha512-hIS4idWWai69NezIdRt2xFVofaF4j+6INOpJlVOLDO8zXGpUVEVzIYk12UUi2JzjEzWL3IOAxcTubgz9Po0yXw==",
+      "license": "MIT",
+      "dependencies": {
+        "accepts": "^2.0.0",
+        "body-parser": "^2.2.1",
+        "content-disposition": "^1.0.0",
+        "content-type": "^1.0.5",
+        "cookie": "^0.7.1",
+        "cookie-signature": "^1.2.1",
+        "debug": "^4.4.0",
+        "depd": "^2.0.0",
+        "encodeurl": "^2.0.0",
+        "escape-html": "^1.0.3",
+        "etag": "^1.8.1",
+        "finalhandler": "^2.1.0",
+        "fresh": "^2.0.0",
+        "http-errors": "^2.0.0",
+        "merge-descriptors": "^2.0.0",
+        "mime-types": "^3.0.0",
+        "on-finished": "^2.4.1",
+        "once": "^1.4.0",
+        "parseurl": "^1.3.3",
+        "proxy-addr": "^2.0.7",
+        "qs": "^6.14.0",
+        "range-parser": "^1.2.1",
+        "router": "^2.2.0",
+        "send": "^1.1.0",
+        "serve-static": "^2.2.0",
+        "statuses": "^2.0.1",
+        "type-is": "^2.0.1",
+        "vary": "^1.1.2"
+      },
+      "engines": {
+        "node": ">= 18"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/finalhandler": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/finalhandler/-/finalhandler-2.1.1.tgz",
+      "integrity": "sha512-S8KoZgRZN+a5rNwqTxlZZePjT/4cnm0ROV70LedRHZ0p8u9fRID0hJUZQpkKLzro8LfmC8sx23bY6tVNxv8pQA==",
+      "license": "MIT",
+      "dependencies": {
+        "debug": "^4.4.0",
+        "encodeurl": "^2.0.0",
+        "escape-html": "^1.0.3",
+        "on-finished": "^2.4.1",
+        "parseurl": "^1.3.3",
+        "statuses": "^2.0.1"
+      },
+      "engines": {
+        "node": ">= 18.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/forwarded": {
+      "version": "0.2.0",
+      "resolved": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz",
+      "integrity": "sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/fresh": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/fresh/-/fresh-2.0.0.tgz",
+      "integrity": "sha512-Rx/WycZ60HOaqLKAi6cHRKKI7zxWbJ31MhntmtwMoaTeF7XFH9hhBp8vITaMidfljRQ6eYWCKkaTK+ykVJHP2A==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/function-bind": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz",
+      "integrity": "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==",
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/get-intrinsic": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz",
+      "integrity": "sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bind-apply-helpers": "^1.0.2",
+        "es-define-property": "^1.0.1",
+        "es-errors": "^1.3.0",
+        "es-object-atoms": "^1.1.1",
+        "function-bind": "^1.1.2",
+        "get-proto": "^1.0.1",
+        "gopd": "^1.2.0",
+        "has-symbols": "^1.1.0",
+        "hasown": "^2.0.2",
+        "math-intrinsics": "^1.1.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/get-proto": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz",
+      "integrity": "sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==",
+      "license": "MIT",
+      "dependencies": {
+        "dunder-proto": "^1.0.1",
+        "es-object-atoms": "^1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/gopd": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz",
+      "integrity": "sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/has-symbols": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz",
+      "integrity": "sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/hasown": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.3.tgz",
+      "integrity": "sha512-ej4AhfhfL2Q2zpMmLo7U1Uv9+PyhIZpgQLGT1F9miIGmiCJIoCgSmczFdrc97mWT4kVY72KA+WnnhJ5pghSvSg==",
+      "license": "MIT",
+      "dependencies": {
+        "function-bind": "^1.1.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/helmet": {
+      "version": "8.1.0",
+      "resolved": "https://registry.npmjs.org/helmet/-/helmet-8.1.0.tgz",
+      "integrity": "sha512-jOiHyAZsmnr8LqoPGmCjYAaiuWwjAPLgY8ZX2XrmHawt99/u1y6RgrZMTeoPfpUbV96HOalYgz1qzkRbw54Pmg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18.0.0"
+      }
+    },
+    "node_modules/http-errors": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.1.tgz",
+      "integrity": "sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==",
+      "license": "MIT",
+      "dependencies": {
+        "depd": "~2.0.0",
+        "inherits": "~2.0.4",
+        "setprototypeof": "~1.2.0",
+        "statuses": "~2.0.2",
+        "toidentifier": "~1.0.1"
+      },
+      "engines": {
+        "node": ">= 0.8"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/iconv-lite": {
+      "version": "0.7.2",
+      "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.7.2.tgz",
+      "integrity": "sha512-im9DjEDQ55s9fL4EYzOAv0yMqmMBSZp6G0VvFyTMPKWxiSBHUj9NW/qqLmXUwXrrM7AvqSlTCfvqRb0cM8yYqw==",
+      "license": "MIT",
+      "dependencies": {
+        "safer-buffer": ">= 2.1.2 < 3.0.0"
+      },
+      "engines": {
+        "node": ">=0.10.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/inherits": {
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz",
+      "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==",
+      "license": "ISC"
+    },
+    "node_modules/ipaddr.js": {
+      "version": "1.9.1",
+      "resolved": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz",
+      "integrity": "sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.10"
+      }
+    },
+    "node_modules/is-promise": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/is-promise/-/is-promise-4.0.0.tgz",
+      "integrity": "sha512-hvpoI6korhJMnej285dSg6nu1+e6uxs7zG3BYAm5byqDsgJNWwxzM6z6iZiAgQR4TJ30JmBTOwqZUw3WlyH3AQ==",
+      "license": "MIT"
+    },
+    "node_modules/math-intrinsics": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz",
+      "integrity": "sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/media-typer": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/media-typer/-/media-typer-1.1.0.tgz",
+      "integrity": "sha512-aisnrDP4GNe06UcKFnV5bfMNPBUw4jsLGaWwWfnH3v02GnBuXX2MCVn5RbrWo0j3pczUilYblq7fQ7Nw2t5XKw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/merge-descriptors": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-2.0.0.tgz",
+      "integrity": "sha512-Snk314V5ayFLhp3fkUREub6WtjBfPdCPY1Ln8/8munuLuiYhsABgBVWsozAG+MWMbVEvcdcpbi9R7ww22l9Q3g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/mime-db": {
+      "version": "1.54.0",
+      "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.54.0.tgz",
+      "integrity": "sha512-aU5EJuIN2WDemCcAp2vFBfp/m4EAhWJnUNSSw0ixs7/kXbd6Pg64EmwJkNdFhB8aWt1sH2CTXrLxo/iAGV3oPQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/mime-types": {
+      "version": "3.0.2",
+      "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-3.0.2.tgz",
+      "integrity": "sha512-Lbgzdk0h4juoQ9fCKXW4by0UJqj+nOOrI9MJ1sSj4nI8aI2eo1qmvQEie4VD1glsS250n15LsWsYtCugiStS5A==",
+      "license": "MIT",
+      "dependencies": {
+        "mime-db": "^1.54.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/ms": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+      "license": "MIT"
+    },
+    "node_modules/negotiator": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/negotiator/-/negotiator-1.0.0.tgz",
+      "integrity": "sha512-8Ofs/AUQh8MaEcrlq5xOX0CQ9ypTF5dl78mjlMNfOK08fzpgTHQRQPBxcPlEtIw0yRpws+Zo/3r+5WRby7u3Gg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/object-inspect": {
+      "version": "1.13.4",
+      "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",
+      "integrity": "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/on-finished": {
+      "version": "2.4.1",
+      "resolved": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz",
+      "integrity": "sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==",
+      "license": "MIT",
+      "dependencies": {
+        "ee-first": "1.1.1"
+      },
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/once": {
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/once/-/once-1.4.0.tgz",
+      "integrity": "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==",
+      "license": "ISC",
+      "dependencies": {
+        "wrappy": "1"
+      }
+    },
+    "node_modules/parseurl": {
+      "version": "1.3.3",
+      "resolved": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz",
+      "integrity": "sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/path-to-regexp": {
+      "version": "8.4.2",
+      "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-8.4.2.tgz",
+      "integrity": "sha512-qRcuIdP69NPm4qbACK+aDogI5CBDMi1jKe0ry5rSQJz8JVLsC7jV8XpiJjGRLLol3N+R5ihGYcrPLTno6pAdBA==",
+      "license": "MIT",
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/proxy-addr": {
+      "version": "2.0.7",
+      "resolved": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz",
+      "integrity": "sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==",
+      "license": "MIT",
+      "dependencies": {
+        "forwarded": "0.2.0",
+        "ipaddr.js": "1.9.1"
+      },
+      "engines": {
+        "node": ">= 0.10"
+      }
+    },
+    "node_modules/qs": {
+      "version": "6.15.1",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.15.1.tgz",
+      "integrity": "sha512-6YHEFRL9mfgcAvql/XhwTvf5jKcOiiupt2FiJxHkiX1z4j7WL8J/jRHYLluORvc1XxB5rV20KoeK00gVJamspg==",
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "side-channel": "^1.1.0"
+      },
+      "engines": {
+        "node": ">=0.6"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/range-parser": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz",
+      "integrity": "sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/raw-body": {
+      "version": "3.0.2",
+      "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-3.0.2.tgz",
+      "integrity": "sha512-K5zQjDllxWkf7Z5xJdV0/B0WTNqx6vxG70zJE4N0kBs4LovmEYWJzQGxC9bS9RAKu3bgM40lrd5zoLJ12MQ5BA==",
+      "license": "MIT",
+      "dependencies": {
+        "bytes": "~3.1.2",
+        "http-errors": "~2.0.1",
+        "iconv-lite": "~0.7.0",
+        "unpipe": "~1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.10"
+      }
+    },
+    "node_modules/router": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/router/-/router-2.2.0.tgz",
+      "integrity": "sha512-nLTrUKm2UyiL7rlhapu/Zl45FwNgkZGaCpZbIHajDYgwlJCOzLSk+cIPAnsEqV955GjILJnKbdQC1nVPz+gAYQ==",
+      "license": "MIT",
+      "dependencies": {
+        "debug": "^4.4.0",
+        "depd": "^2.0.0",
+        "is-promise": "^4.0.0",
+        "parseurl": "^1.3.3",
+        "path-to-regexp": "^8.0.0"
+      },
+      "engines": {
+        "node": ">= 18"
+      }
+    },
+    "node_modules/safer-buffer": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
+      "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==",
+      "license": "MIT"
+    },
+    "node_modules/send": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/send/-/send-1.2.1.tgz",
+      "integrity": "sha512-1gnZf7DFcoIcajTjTwjwuDjzuz4PPcY2StKPlsGAQ1+YH20IRVrBaXSWmdjowTJ6u8Rc01PoYOGHXfP1mYcZNQ==",
+      "license": "MIT",
+      "dependencies": {
+        "debug": "^4.4.3",
+        "encodeurl": "^2.0.0",
+        "escape-html": "^1.0.3",
+        "etag": "^1.8.1",
+        "fresh": "^2.0.0",
+        "http-errors": "^2.0.1",
+        "mime-types": "^3.0.2",
+        "ms": "^2.1.3",
+        "on-finished": "^2.4.1",
+        "range-parser": "^1.2.1",
+        "statuses": "^2.0.2"
+      },
+      "engines": {
+        "node": ">= 18"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/serve-static": {
+      "version": "2.2.1",
+      "resolved": "https://registry.npmjs.org/serve-static/-/serve-static-2.2.1.tgz",
+      "integrity": "sha512-xRXBn0pPqQTVQiC8wyQrKs2MOlX24zQ0POGaj0kultvoOCstBQM5yvOhAVSUwOMjQtTvsPWoNCHfPGwaaQJhTw==",
+      "license": "MIT",
+      "dependencies": {
+        "encodeurl": "^2.0.0",
+        "escape-html": "^1.0.3",
+        "parseurl": "^1.3.3",
+        "send": "^1.2.0"
+      },
+      "engines": {
+        "node": ">= 18"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/setprototypeof": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz",
+      "integrity": "sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==",
+      "license": "ISC"
+    },
+    "node_modules/side-channel": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz",
+      "integrity": "sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==",
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0",
+        "object-inspect": "^1.13.3",
+        "side-channel-list": "^1.0.0",
+        "side-channel-map": "^1.0.1",
+        "side-channel-weakmap": "^1.0.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/side-channel-list": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.1.tgz",
+      "integrity": "sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==",
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0",
+        "object-inspect": "^1.13.4"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/side-channel-map": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz",
+      "integrity": "sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bound": "^1.0.2",
+        "es-errors": "^1.3.0",
+        "get-intrinsic": "^1.2.5",
+        "object-inspect": "^1.13.3"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/side-channel-weakmap": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz",
+      "integrity": "sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bound": "^1.0.2",
+        "es-errors": "^1.3.0",
+        "get-intrinsic": "^1.2.5",
+        "object-inspect": "^1.13.3",
+        "side-channel-map": "^1.0.1"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/statuses": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz",
+      "integrity": "sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/toidentifier": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz",
+      "integrity": "sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.6"
+      }
+    },
+    "node_modules/type-is": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/type-is/-/type-is-2.0.1.tgz",
+      "integrity": "sha512-OZs6gsjF4vMp32qrCbiVSkrFmXtG/AZhY3t0iAMrMBiAZyV9oALtXO8hsrHbMXF9x6L3grlFuwW2oAz7cav+Gw==",
+      "license": "MIT",
+      "dependencies": {
+        "content-type": "^1.0.5",
+        "media-typer": "^1.1.0",
+        "mime-types": "^3.0.0"
+      },
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/unpipe": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz",
+      "integrity": "sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/vary": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz",
+      "integrity": "sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/wrappy": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz",
+      "integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==",
+      "license": "ISC"
+    }
+  }
+}
diff --git a/package.json b/package.json
new file mode 100644
index 0000000..6576f49
--- /dev/null
+++ b/package.json
@@ -0,0 +1,16 @@
+{
+  "name": "mfr-review-viewer",
+  "version": "1.0.0",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "keywords": [],
+  "author": "",
+  "license": "ISC",
+  "description": "",
+  "dependencies": {
+    "express": "^5.2.1",
+    "helmet": "^8.1.0"
+  }
+}
diff --git a/server.js b/server.js
new file mode 100644
index 0000000..7fd6cb7
--- /dev/null
+++ b/server.js
@@ -0,0 +1,532 @@
+/**
+ * MFR Review Viewer — port 9870
+ * Helps Steve assign reactivation decisions per vendor (and per product) before bulk action.
+ *
+ * Decisions persist to /tmp/mfr_review_decisions.json
+ *   { "<vendor>": { decision: "all"|"wallpaper"|"fabric"|"trim"|"skip", notes: "..." },
+ *     "_per_product": { "<gid>": { decision: "...", notes: "..." } } }
+ */
+const express = require('express');
+const helmet = require('helmet');
+const fs = require('fs');
+const path = require('path');
+
+const PORT = 9871;
+const USER = 'admin';
+const PASS = 'DWSecure2024!';
+const DECISIONS_FILE = '/tmp/mfr_review_decisions.json';
+
+const auditPath = '/tmp/mfr_audit_state.ndjson';
+const eligiblePath = '/tmp/e_eligible.json';
+const e3Path = '/tmp/e3_cause_state.ndjson';
+const typeMapPath = '/tmp/archived_type_map.json';
+
+function load() {
+  const audit = fs.readFileSync(auditPath, 'utf8').trim().split('\n').map(l => JSON.parse(l));
+  const e3 = fs.existsSync(e3Path) ? fs.readFileSync(e3Path, 'utf8').trim().split('\n').map(l => JSON.parse(l)) : [];
+  const e3Map = new Map(e3.map(r => [r.id, r.actor]));
+  const typeMap = fs.existsSync(typeMapPath) ? JSON.parse(fs.readFileSync(typeMapPath, 'utf8')) : {};
+  // Merge
+  const enriched = audit.map(r => ({
+    ...r,
+    actor: e3Map.get(r.id) || 'unknown',
+    productType: typeMap[r.id]?.type || '',
+    tags: typeMap[r.id]?.tags || [],
+    title: '',
+  }));
+  // Backfill titles from eligible
+  if (fs.existsSync(eligiblePath)) {
+    const titleMap = new Map(JSON.parse(fs.readFileSync(eligiblePath, 'utf8')).map(p => [p.id, p.title]));
+    enriched.forEach(r => { r.title = titleMap.get(r.id) || ''; });
+  }
+  return enriched;
+}
+
+function loadDecisions() {
+  if (!fs.existsSync(DECISIONS_FILE)) return { _per_product: {} };
+  return JSON.parse(fs.readFileSync(DECISIONS_FILE, 'utf8'));
+}
+
+function saveDecisions(d) {
+  fs.writeFileSync(DECISIONS_FILE, JSON.stringify(d, null, 2));
+}
+
+const app = express();
+// Security headers via helmet (added 2026-05-04 overnight YOLO loop)
+app.use(helmet({ contentSecurityPolicy: false }));
+app.use(express.json());
+
+// Basic Auth
+app.use((req, res, next) => {
+  const h = req.headers.authorization || '';
+  if (!h.startsWith('Basic ')) {
+    res.set('WWW-Authenticate', 'Basic realm="MFR Review"');
+    return res.status(401).send('Auth required');
+  }
+  const decoded = Buffer.from(h.slice(6), 'base64').toString();
+  const [u, p] = decoded.split(':');
+  if (u !== USER || p !== PASS) {
+    res.set('WWW-Authenticate', 'Basic realm="MFR Review"');
+    return res.status(401).send('Bad credentials');
+  }
+  next();
+});
+
+app.get('/api/vendors', (req, res) => {
+  const all = load();
+  const decisions = loadDecisions();
+  const byVendor = {};
+  for (const r of all) {
+    const v = r.vendor || '(no vendor)';
+    if (!byVendor[v]) byVendor[v] = { vendor: v, total: 0, real: 0, polluted: 0, empty: 0, fmproFixable: 0, unfixable: 0, types: {}, actors: {} };
+    const b = byVendor[v];
+    b.total++;
+    if (r.bucket === 'real') b.real++;
+    else if (r.bucket === 'polluted') b.polluted++;
+    else if (r.bucket === 'empty') b.empty++;
+    if (r.bucket !== 'real' && r.fmproMfr) b.fmproFixable++;
+    if (r.bucket !== 'real' && !r.fmproMfr) b.unfixable++;
+    const t = r.productType || '(unknown)';
+    b.types[t] = (b.types[t] || 0) + 1;
+    b.actors[r.actor] = (b.actors[r.actor] || 0) + 1;
+  }
+  // Attach decisions
+  for (const v of Object.values(byVendor)) {
+    v.decision = decisions[v.vendor]?.decision || null;
+    v.notes = decisions[v.vendor]?.notes || '';
+  }
+  const list = Object.values(byVendor).sort((a, b) => b.total - a.total);
+  res.json({ vendors: list, totalProducts: all.length });
+});
+
+app.get('/api/vendors/:vendor', (req, res) => {
+  const vendor = decodeURIComponent(req.params.vendor);
+  const all = load();
+  const decisions = loadDecisions();
+  const products = all.filter(r => (r.vendor || '(no vendor)') === vendor)
+    .map(r => ({
+      id: r.id, title: r.title, sku: r.sku, mfr: r.mfr, bucket: r.bucket, fmproMfr: r.fmproMfr,
+      productType: r.productType, actor: r.actor,
+      decision: decisions._per_product[r.id]?.decision || null,
+      notes: decisions._per_product[r.id]?.notes || '',
+    }))
+    .sort((a, b) => (a.productType || '').localeCompare(b.productType || '') || (a.title || '').localeCompare(b.title || ''));
+  res.json({ vendor, products, count: products.length, vendorDecision: decisions[vendor] || null });
+});
+
+app.post('/api/vendors/:vendor/decision', (req, res) => {
+  const vendor = decodeURIComponent(req.params.vendor);
+  const { decision, notes } = req.body;
+  const d = loadDecisions();
+  d[vendor] = { decision, notes: notes || '', ts: new Date().toISOString() };
+  saveDecisions(d);
+  res.json({ ok: true });
+});
+
+app.post('/api/products/:id/decision', (req, res) => {
+  const id = req.params.id;
+  const { decision, notes } = req.body;
+  const d = loadDecisions();
+  if (!d._per_product) d._per_product = {};
+  d._per_product[id] = { decision, notes: notes || '', ts: new Date().toISOString() };
+  saveDecisions(d);
+  res.json({ ok: true });
+});
+
+app.get('/api/decisions/recent', (req, res) => {
+  const d = loadDecisions();
+  const all = load();
+  const titleMap = new Map(all.map(r => [r.id, { title: r.title, sku: r.sku, vendor: r.vendor, type: r.productType }]));
+  const items = [];
+  // Vendor decisions
+  for (const [v, info] of Object.entries(d)) {
+    if (v === '_per_product' || !info.ts) continue;
+    items.push({ scope: 'vendor', vendor: v, decision: info.decision, ts: info.ts, notes: info.notes || '' });
+  }
+  // Per-product decisions
+  for (const [id, info] of Object.entries(d._per_product || {})) {
+    if (!info.ts) continue;
+    const meta = titleMap.get(id) || {};
+    items.push({ scope: 'product', id, title: meta.title, sku: meta.sku, vendor: meta.vendor, type: meta.type, decision: info.decision, ts: info.ts, notes: info.notes || '' });
+  }
+  items.sort((a, b) => b.ts.localeCompare(a.ts));
+  res.json({ items: items.slice(0, 30), total: items.length });
+});
+
+app.get('/api/decisions', (req, res) => res.json(loadDecisions()));
+
+app.get('/api/decisions/export', (req, res) => {
+  // Compute the final per-product action based on vendor + per-product decisions
+  const all = load();
+  const d = loadDecisions();
+  const reactivate = [], deleteIds = [], skip = [], pending = [];
+  for (const r of all) {
+    const vDecision = d[r.vendor]?.decision || 'pending';
+    const pDecision = d._per_product?.[r.id]?.decision || null;
+    let final;
+    if (pDecision === 'reactivate') final = 'reactivate';
+    else if (pDecision === 'delete') final = 'delete';
+    else if (pDecision === 'skip') final = 'skip';
+    else if (vDecision === 'all') final = 'reactivate';
+    else if (vDecision === 'delete') final = 'delete';
+    else if (vDecision === 'skip') final = 'skip';
+    else if (vDecision === 'wallpaper' && /wallcovering|wallpaper/i.test(r.productType || '')) final = 'reactivate';
+    else if (vDecision === 'fabric' && /fabric/i.test(r.productType || '')) final = 'reactivate';
+    else if (vDecision === 'trim' && /trim/i.test(r.productType || '')) final = 'reactivate';
+    else final = 'pending';
+    if (final === 'reactivate') reactivate.push(r.id);
+    else if (final === 'delete') deleteIds.push(r.id);
+    else if (final === 'skip') skip.push(r.id);
+    else pending.push(r.id);
+  }
+  res.json({
+    counts: { reactivate: reactivate.length, delete: deleteIds.length, skip: skip.length, pending: pending.length },
+    reactivate, delete: deleteIds, skip, pending,
+  });
+});
+
+// ===== APPLY pipeline =====
+const TOKEN = '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';
+const SHOP = 'designer-laboratory-sandbox.myshopify.com';
+const SHOPIFY_API = `https://${SHOP}/admin/api/2024-10/graphql.json`;
+const APPLY_LOG = '/tmp/mfr_apply_log.ndjson';
+
+let applyState = { running: false, ok: 0, fail: 0, total: 0, phase: 'idle', startedAt: null, lastError: null };
+
+async function gqlMut(q, vars) {
+  for (let i = 0; i < 4; i++) {
+    try {
+      const r = await fetch(SHOPIFY_API, { method: 'POST', headers: { 'X-Shopify-Access-Token': TOKEN, 'Content-Type': 'application/json' }, body: JSON.stringify({ query: q, variables: vars }) });
+      const t = await r.text();
+      if (!t.startsWith('{')) { await new Promise(res => setTimeout(res, 1500 * (i + 1))); continue; }
+      const j = JSON.parse(t);
+      if (j.errors && j.errors.some(e => /THROTTLED/i.test(JSON.stringify(e)))) { await new Promise(res => setTimeout(res, 1500 * (i + 1))); continue; }
+      return j;
+    } catch { await new Promise(res => setTimeout(res, 1000 * (i + 1))); }
+  }
+  return { errors: [{ message: 'gql_exhausted' }] };
+}
+
+app.get('/api/apply/status', (req, res) => res.json(applyState));
+
+app.post('/api/apply', async (req, res) => {
+  if (applyState.running) return res.json({ error: 'already running', state: applyState });
+  applyState = { running: true, ok: 0, fail: 0, total: 0, phase: 'starting', startedAt: new Date().toISOString(), lastError: null };
+  res.json({ started: true });
+
+  try {
+    // Phase 1: fix metafield for fixable rows
+    const audit = fs.readFileSync('/tmp/mfr_audit_state.ndjson', 'utf8').trim().split('\n').map(l => JSON.parse(l));
+    const exp = await (await fetch(`http://localhost:${PORT}/api/decisions/export`, { headers: { 'Authorization': req.headers.authorization } })).json();
+    const reactSet = new Set(exp.reactivate);
+    const deleteSet = new Set(exp.delete);
+    // Only fix the ones we plan to reactivate (the others stay archived, no point)
+    const toFix = audit.filter(r => reactSet.has(r.id) && r.bucket !== 'real' && r.fmproMfr && r.fmproMfr !== r.mfr);
+    const toReactivate = exp.reactivate;
+    const toDelete = exp.delete;
+    applyState.total = toFix.length + toReactivate.length + toDelete.length;
+    applyState.phase = `fix mfr (${toFix.length})`;
+    const out = fs.createWriteStream(APPLY_LOG, { flags: 'a' });
+    out.write(JSON.stringify({ ts: new Date().toISOString(), phase: 'start', toFix: toFix.length, toReactivate: toReactivate.length, toDelete: toDelete.length }) + '\n');
+
+    // Phase 1: metafieldsSet in batches of 25
+    for (let i = 0; i < toFix.length; i += 25) {
+      const chunk = toFix.slice(i, i + 25);
+      const mfs = chunk.map(c => ({ ownerId: c.id, namespace: 'custom', key: 'manufacturer_sku', type: 'single_line_text_field', value: c.fmproMfr }));
+      const j = await gqlMut(`mutation set($mfs:[MetafieldsSetInput!]!){metafieldsSet(metafields:$mfs){metafields{id} userErrors{field message}}}`, { mfs });
+      if (j.data?.metafieldsSet?.userErrors?.length || j.errors) { applyState.fail += chunk.length; applyState.lastError = JSON.stringify(j).slice(0, 200); }
+      else applyState.ok += chunk.length;
+      out.write(JSON.stringify({ ts: new Date().toISOString(), phase: 'fix', batch: i / 25, ok: !j.errors }) + '\n');
+    }
+
+    // Phase 2: reactivate
+    applyState.phase = `reactivate (${toReactivate.length})`;
+    for (const id of toReactivate) {
+      const j = await gqlMut(`mutation($id:ID!){productChangeStatus(productId:$id,status:ACTIVE){product{id status} userErrors{field message}}}`, { id });
+      if (j.data?.productChangeStatus?.userErrors?.length || j.errors) { applyState.fail++; applyState.lastError = JSON.stringify(j).slice(0, 200); }
+      else applyState.ok++;
+      if ((applyState.ok + applyState.fail) % 100 === 0) {
+        out.write(JSON.stringify({ ts: new Date().toISOString(), phase: 'reactivate', ok: applyState.ok, fail: applyState.fail }) + '\n');
+      }
+    }
+
+    // Phase 3: delete
+    applyState.phase = `delete (${toDelete.length})`;
+    for (const id of toDelete) {
+      const j = await gqlMut(`mutation($id:ID!){productDelete(input:{id:$id}){deletedProductId userErrors{field message}}}`, { id });
+      if (j.data?.productDelete?.userErrors?.length || j.errors) { applyState.fail++; applyState.lastError = JSON.stringify(j).slice(0, 200); }
+      else applyState.ok++;
+      if ((applyState.ok + applyState.fail) % 100 === 0) {
+        out.write(JSON.stringify({ ts: new Date().toISOString(), phase: 'delete', ok: applyState.ok, fail: applyState.fail }) + '\n');
+      }
+    }
+
+    applyState.phase = 'done';
+    applyState.running = false;
+    out.write(JSON.stringify({ ts: new Date().toISOString(), phase: 'done', ok: applyState.ok, fail: applyState.fail }) + '\n');
+    out.end();
+  } catch (e) {
+    applyState.running = false;
+    applyState.phase = 'error';
+    applyState.lastError = e.message;
+  }
+});
+
+app.get('/', (_req, res) => {
+  res.set('Content-Type', 'text/html').send(html());
+});
+
+function html() {
+  return `<!doctype html>
+<html lang="en"><head><meta charset="utf-8">
+<title>MFR Review — DW Bulk Reactivation</title>
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<style>
+  :root{color-scheme:dark}
+  *{box-sizing:border-box}
+  body{margin:0;background:#0a0c12;color:#e5e7eb;font-family:-apple-system,system-ui,sans-serif}
+  header{padding:14px 24px;background:#111827;border-bottom:1px solid #1f2937;display:flex;justify-content:space-between;align-items:center}
+  h1{margin:0;font-size:18px;font-weight:700}
+  .stat{font-size:12px;color:#9ca3af}
+  main{display:grid;grid-template-columns:380px 1fr;gap:0;height:calc(100vh - 56px)}
+  .pane{padding:14px;overflow-y:auto;height:100%}
+  .pane:first-child{border-right:1px solid #1f2937;background:#0f1115}
+  table{width:100%;border-collapse:collapse;font-size:12px}
+  th{text-align:left;padding:6px;color:#9ca3af;font-weight:500;border-bottom:1px solid #1f2937;position:sticky;top:0;background:#0f1115}
+  td{padding:6px;border-bottom:1px solid #1a1d27}
+  tr:hover{background:#1a1d27;cursor:pointer}
+  tr.active{background:#1e293b}
+  .decision{padding:2px 6px;border-radius:3px;font-size:10px;font-weight:600}
+  .d-all{background:#22c55e30;color:#86efac}
+  .d-skip{background:#ef444430;color:#fca5a5}
+  .d-wallpaper,.d-fabric,.d-trim{background:#3b82f630;color:#93c5fd}
+  .d-pending{background:#6b728030;color:#9ca3af}
+  .pill{display:inline-block;padding:2px 6px;border-radius:3px;font-size:10px;background:#1f2937}
+  .types{display:flex;gap:4px;flex-wrap:wrap}
+  .controls{display:flex;gap:8px;margin:10px 0;flex-wrap:wrap;align-items:center}
+  button{background:#1f2937;color:#e5e7eb;border:1px solid #374151;padding:6px 12px;border-radius:4px;cursor:pointer;font-size:12px}
+  button.primary{background:#2563eb;border-color:#3b82f6}
+  button.danger{background:#dc2626;border-color:#ef4444}
+  textarea{width:100%;background:#0f1115;border:1px solid #374151;color:#e5e7eb;padding:8px;border-radius:4px;font-family:inherit;min-height:60px}
+  select{background:#0f1115;border:1px solid #374151;color:#e5e7eb;padding:6px 10px;border-radius:4px;font-size:12px}
+  input[type=search]{background:#0f1115;border:1px solid #374151;color:#e5e7eb;padding:6px 10px;border-radius:4px;font-size:12px;min-width:200px}
+  .vendor-row .types-mini{font-size:10px;color:#6b7280;margin-top:2px}
+  .small{font-size:11px;color:#6b7280}
+  .product-list{margin-top:14px}
+  .product-row{display:grid;grid-template-columns:1fr 100px 100px 80px 60px 110px;gap:8px;padding:6px 0;border-bottom:1px solid #1a1d27;font-size:12px;align-items:center}
+  .product-row:hover{background:#1a1d27}
+  .product-row .title{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+  .product-row .mfr{font-family:monospace;font-size:11px;color:#9ca3af}
+</style></head>
+<body>
+<header>
+  <div><h1>MFR Review &mdash; Bulk Reactivation Decisions</h1>
+  <div class="stat" id="header-stat">Loading...</div></div>
+  <div style="display:flex;gap:14px;align-items:center">
+    <div class="stat" id="totals-stat" style="text-align:right">—</div>
+    <button class="primary" id="apply-btn" onclick="confirmApply()" style="padding:8px 16px;font-size:13px;font-weight:600">⚡ APPLY ALL</button>
+  </div>
+</header>
+<div id="progress-strip" style="display:none;background:#1e293b;border-bottom:1px solid #334155;padding:8px 24px;font-size:12px"></div>
+<div id="recent-strip" style="background:#0f1115;border-bottom:1px solid #1f2937;padding:8px 24px;font-size:12px;max-height:140px;overflow-y:auto">
+  <div style="color:#9ca3af;font-weight:600;margin-bottom:4px">Recent decisions</div>
+  <div id="recent-content" style="color:#6b7280">No decisions yet — start clicking vendors below.</div>
+</div>
+<main>
+  <div class="pane">
+    <input type="search" id="vendor-search" placeholder="Filter vendors..." style="width:100%;margin-bottom:10px">
+    <table id="vendor-table">
+      <thead><tr><th>Vendor</th><th>Total</th><th>Decision</th></tr></thead>
+      <tbody id="vendor-tbody"></tbody>
+    </table>
+  </div>
+  <div class="pane" id="detail">
+    <div style="color:#6b7280;text-align:center;padding-top:80px">Click a vendor to view details</div>
+  </div>
+</main>
+<script>
+let vendors = [];
+let selectedVendor = null;
+
+async function loadVendors() {
+  const r = await fetch('/api/vendors').then(r=>r.json());
+  vendors = r.vendors;
+  document.getElementById('header-stat').textContent = r.totalProducts.toLocaleString() + ' archived-eligible products | ' + vendors.length + ' vendors';
+  renderVendorList();
+  updateTotals();
+}
+
+async function updateTotals() {
+  const t = await fetch('/api/decisions/export').then(r=>r.json());
+  const c = t.counts;
+  document.getElementById('totals-stat').innerHTML =
+    '<span style="color:#86efac">↻ ' + c.reactivate + ' reactivate</span> · ' +
+    '<span style="color:#fca5a5">✕ ' + c.delete + ' DELETE</span> · ' +
+    '<span style="color:#9ca3af">— ' + c.skip + ' skip</span> · ' +
+    '<span style="color:#fbbf24">? ' + c.pending + ' pending</span>';
+  updateRecent();
+}
+
+function decColor(d){
+  if (d==='all'||d==='reactivate') return '#86efac';
+  if (d==='delete') return '#fca5a5';
+  if (d==='skip') return '#9ca3af';
+  if (d==='wallpaper'||d==='fabric'||d==='trim') return '#93c5fd';
+  return '#fbbf24';
+}
+function fmtTime(iso){
+  const ms=Date.now()-new Date(iso).getTime();
+  const s=Math.round(ms/1000);
+  if(s<60)return s+'s ago';
+  const m=Math.round(s/60); if(m<60)return m+'m ago';
+  const h=Math.round(m/60); if(h<24)return h+'h ago';
+  return Math.round(h/24)+'d ago';
+}
+async function updateRecent() {
+  const r = await fetch('/api/decisions/recent').then(r=>r.json());
+  const el = document.getElementById('recent-content');
+  if (!r.items.length) { el.innerHTML = '<span style="color:#6b7280">No decisions yet</span>'; return; }
+  el.innerHTML = r.items.slice(0, 12).map(it => {
+    const c = decColor(it.decision);
+    if (it.scope === 'vendor') {
+      return '<div style="padding:2px 0">' +
+        '<span style="color:'+c+';font-weight:600">'+it.decision+'</span> ' +
+        '<b>'+it.vendor+'</b> ' +
+        '<span style="color:#6b7280">'+fmtTime(it.ts)+'</span>' +
+        (it.notes ? '<span style="color:#9ca3af"> — '+it.notes.slice(0,80)+'</span>' : '') +
+        '</div>';
+    } else {
+      return '<div style="padding:2px 0">' +
+        '<span style="color:'+c+';font-weight:600">'+(it.decision||'cleared')+'</span> ' +
+        '<span style="font-family:monospace;color:#9ca3af">'+(it.sku||'')+'</span> ' +
+        '<span style="color:#e5e7eb">'+(it.title||'').slice(0,50)+'</span> ' +
+        '<span style="color:#6b7280">['+(it.type||'?')+'] '+fmtTime(it.ts)+'</span>' +
+        '</div>';
+    }
+  }).join('') + (r.total > 12 ? '<div style="color:#6b7280;margin-top:4px">+ ' + (r.total - 12) + ' more</div>' : '');
+}
+
+function renderVendorList() {
+  const filter = document.getElementById('vendor-search').value.toLowerCase();
+  const tbody = document.getElementById('vendor-tbody');
+  tbody.innerHTML = vendors.filter(v => v.vendor.toLowerCase().includes(filter)).map(v => {
+    const dec = v.decision || 'pending';
+    const types = Object.entries(v.types || {}).sort((a,b)=>b[1]-a[1]).slice(0,3).map(([t,n])=>t+':'+n).join(', ');
+    return '<tr class="vendor-row ' + (selectedVendor===v.vendor?'active':'') + '" onclick="selectVendor(\\''+ encodeURIComponent(v.vendor) +'\\')">'
+      + '<td><b>' + v.vendor + '</b><div class="types-mini">' + types + '</div></td>'
+      + '<td>' + v.total.toLocaleString() + '<div class="small">' + v.fmproFixable + ' fix · ' + v.unfixable + ' un</div></td>'
+      + '<td><span class="decision d-' + dec + '">' + dec + '</span></td></tr>';
+  }).join('');
+}
+
+document.getElementById('vendor-search').addEventListener('input', renderVendorList);
+
+async function selectVendor(encVendor) {
+  const vendor = decodeURIComponent(encVendor);
+  selectedVendor = vendor;
+  renderVendorList();
+  const r = await fetch('/api/vendors/' + encVendor).then(r=>r.json());
+  const v = vendors.find(x => x.vendor === vendor);
+  const types = Object.entries(v.types || {}).sort((a,b)=>b[1]-a[1]);
+  const actors = Object.entries(v.actors || {}).sort((a,b)=>b[1]-a[1]);
+  const dec = r.vendorDecision?.decision || 'pending';
+  const notes = r.vendorDecision?.notes || '';
+  document.getElementById('detail').innerHTML = \`
+    <h2 style="margin:0 0 8px">\${vendor} <span class="small">(\${r.count.toLocaleString()} products)</span></h2>
+    <div style="display:grid;grid-template-columns:1fr 1fr;gap:14px;margin-bottom:14px">
+      <div>
+        <div class="small" style="margin-bottom:4px">Product types</div>
+        <div class="types">\${types.map(([t,n])=>'<span class="pill">'+t+': '+n+'</span>').join('')}</div>
+      </div>
+      <div>
+        <div class="small" style="margin-bottom:4px">Archived by</div>
+        <div class="types">\${actors.map(([a,n])=>'<span class="pill">'+a+': '+n+'</span>').join('')}</div>
+      </div>
+    </div>
+    <div class="controls">
+      <span class="small">Decision:</span>
+      <select id="vd">
+        <option value="pending"\${dec==='pending'?' selected':''}>Pending</option>
+        <option value="all"\${dec==='all'?' selected':''}>Reactivate ALL</option>
+        <option value="wallpaper"\${dec==='wallpaper'?' selected':''}>Wallpaper/Wallcovering only</option>
+        <option value="fabric"\${dec==='fabric'?' selected':''}>Fabric only</option>
+        <option value="trim"\${dec==='trim'?' selected':''}>Trim only</option>
+        <option value="skip"\${dec==='skip'?' selected':''}>Skip (leave archived)</option>
+        <option value="delete"\${dec==='delete'?' selected':''}>DELETE ALL (permanent)</option>
+      </select>
+      <button class="primary" onclick="saveVendor('\${encVendor}')">Save</button>
+    </div>
+    <textarea id="vn" placeholder="Notes for Claude (e.g. 'discontinued', 'settlement', 'only sample-only items', 'review by hand')...">\${notes}</textarea>
+    <div class="product-list">
+      <h3>Products (\${r.count})</h3>
+      <div class="small" style="display:grid;grid-template-columns:1fr 100px 100px 80px 60px 110px;gap:8px;padding:6px 0;border-bottom:1px solid #374151">
+        <div>Title</div><div>Type</div><div>SKU</div><div>MFR</div><div>Bkt</div><div>Override</div>
+      </div>
+      \${r.products.map(p=>\`
+        <div class="product-row">
+          <div class="title" title="\${p.title}">\${p.title || '(untitled)'}</div>
+          <div class="mfr">\${p.productType || '-'}</div>
+          <div class="mfr">\${p.sku}</div>
+          <div class="mfr">\${p.mfr || (p.fmproMfr ? '<span style="color:#86efac">'+p.fmproMfr+' (fix)</span>' : '<span style="color:#fca5a5">missing</span>')}</div>
+          <div><span class="decision d-\${p.bucket==='real'?'all':'pending'}">\${p.bucket}</span></div>
+          <div><select onchange="saveProduct('\${p.id}', this.value)"><option value=""\${!p.decision?' selected':''}>—</option><option value="reactivate"\${p.decision==='reactivate'?' selected':''}>Reactivate</option><option value="skip"\${p.decision==='skip'?' selected':''}>Skip</option><option value="delete"\${p.decision==='delete'?' selected':''}>Delete</option></select></div>
+        </div>
+      \`).join('')}
+    </div>
+  \`;
+}
+
+async function saveVendor(encVendor) {
+  const dec = document.getElementById('vd').value;
+  const notes = document.getElementById('vn').value;
+  await fetch('/api/vendors/' + encVendor + '/decision', {method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({decision:dec,notes})});
+  await loadVendors();
+}
+
+async function saveProduct(id, dec) {
+  await fetch('/api/products/' + encodeURIComponent(id) + '/decision', {method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({decision:dec})});
+  updateTotals();
+}
+
+async function confirmApply() {
+  const t = await fetch('/api/decisions/export').then(r=>r.json());
+  const c = t.counts;
+  const msg = 'You are about to:\\n\\n' +
+    '↻ Reactivate ' + c.reactivate.toLocaleString() + ' products\\n' +
+    '✕ DELETE ' + c.delete.toLocaleString() + ' products (PERMANENT)\\n' +
+    '— Skip ' + c.skip.toLocaleString() + ' products\\n' +
+    '? ' + c.pending.toLocaleString() + ' products are still pending (will NOT be touched)\\n\\n' +
+    'Phase 1 will fix mfr metafields for the reactivate cohort first.\\n\\n' +
+    'Type "EXECUTE" to confirm:';
+  const resp = prompt(msg);
+  if (resp !== 'EXECUTE') { alert('Cancelled.'); return; }
+  await fetch('/api/apply', {method:'POST'});
+  pollApply();
+}
+
+async function pollApply() {
+  const strip = document.getElementById('progress-strip');
+  strip.style.display = 'block';
+  const interval = setInterval(async () => {
+    const s = await fetch('/api/apply/status').then(r=>r.json());
+    const pct = s.total ? Math.round(((s.ok+s.fail)/s.total)*100) : 0;
+    strip.innerHTML = '<b>' + s.phase + '</b> &middot; ' + pct + '% &middot; ok=' + s.ok + ' fail=' + s.fail + (s.lastError ? ' &middot; <span style="color:#fca5a5">last err: ' + s.lastError.slice(0,80) + '</span>' : '');
+    if (!s.running && s.phase === 'done') {
+      clearInterval(interval);
+      strip.innerHTML += ' &middot; <b style="color:#86efac">DONE</b>';
+      updateTotals();
+    } else if (!s.running && s.phase === 'error') {
+      clearInterval(interval);
+      strip.innerHTML += ' &middot; <b style="color:#fca5a5">ERROR</b>';
+    }
+  }, 2000);
+}
+
+loadVendors();
+</script>
+</body></html>`;
+}
+
+app.listen(PORT, '0.0.0.0', () => {
+  console.log(`MFR Review viewer http://0.0.0.0:${PORT} (open to LAN + Tailnet)`);
+});

(oldest)  ·  back to Mfr Review Viewer  ·  broaden .gitignore to cover .bak.* and .pre-* snapshot files c72578f →