Patterndesignlab

repo: ~/Projects/patterndesignlab · 24 commits · 0 in last 24h, 3 in last 7d · █

Search the build

24 commits indexed

  1. 22fb969 2026-07-22 chore: lint+refactor hardening (open-redirect guard, image path containment, double-submit guard, adminUrl from SHOP), v0.2.0 (session close)
  2. 350abca 2026-07-22 pin cookie@0.7.2 explicitly (Kamatera npm pulled v1.x with changed exports; live deploy hardening: PDL_JWT_SECRET now set in prod .env)
  3. 29ef95e 2026-07-22 admin login (JWT cookie) + add-design-to-Shopify-as-DIG-item admin bar on design pages
  4. 1a53e09 2026-07-06 5x re-verify: app clean (0 real defects), B6 Firefox fixed via lsregister (real cause: LaunchServices not registered, not missing app); clickthrough red = harness artifact
  5. 4f27d5d 2026-07-06 5x: contrarian gate — correct overclaim, record 3 real defects found+fixed+verified
  6. 20e53ca 2026-07-06 fix: flush search box into state.q on every load() so typing + clicking a filter keeps the search text (contrarian: search desync)
  7. 2ae1f2e 2026-07-06 security: stop /api/designers/:slug leaking password_hash+email; require admin auth even under PUBLIC=1 (contrarian findings)
  8. d5dbf02 2026-07-06 5x: verify security-hardened PDL — 2 clean sweeps, 0 real defects (B6=env, clickthrough=harness)
  9. 2e4f761 2026-07-06 security: harden designer auth + upload
  10. a4e12d5 2026-07-05 designer accounts: bcrypt login + JWT cookie, self-edit endpoint, image upload (upload/URL/generated), patternbank-style profile with socials + share, login + dashboard pages
  11. 53f0f05 2026-07-05 designers: 15 studio personas + coherent balanced catalog split, auth schema, generated portraits
  12. d92f3a8 2026-07-04 Go-live prep for prestige.agentabrams.com: vision-screen all, deploy config, DB dump, runbook
  13. 3708590 2026-07-04 Add .deploy.conf for prestige.agentabrams.com go-live
  14. df1617f 2026-07-04 Exclude settlement vision_blocked/vision_review designs from storefront (designs/facets/detail/designer); surface status in admin for audit
  15. 7136fea 2026-07-04 Add settlement post-gen vision pass (Gemini 2.5-flash, one call/image, cost-ceiling + 429 hard-stop) and settlement_status columns
  16. c2f385a 2026-07-04 Pull 1451 owned credible masters from prod (chinoiserie/stripe/other + 10 curated), reseed local catalog to 1694 designs / 6.0% novelty
  17. eeacf3d 2026-07-04 Credible-first default storefront: lead page 1 with design-forward content, add Collection segment (Design-forward/Playful/All) + class filter + facet counts
  18. 76df8eb 2026-07-04 iter-3: deepen credible catalog to 243, harden settlement screen, add pagination
  19. dbfae51 2026-07-04 Fix contrarian findings: working detail-page search, sort+density on designer grid, density on admin grid
  20. 35e033e 2026-07-04 iter-2: trend boards, designer onboarding funnel, correct 1:1 design images (127), license terms on PDP
  21. c083b5c 2026-07-04 refine style facet (stripe→Stripe not Coastal); favicon 204 to silence console 404
  22. 23e1fcf 2026-07-04 express server (search/facets/sort/checkout guard/admin) + marketplace, detail w/ tile-on-wall, designer, admin pages
  23. 989cb8c 2026-07-04 postgres schema + seed 38 owned designs across 3 designer profiles (facets derived locally, no paid AI)
  24. 00e1d49 2026-07-04 initial scaffold: gitignore, package.json, README, real seamless assets

Authors

Agents used

  • none detected

Skills used

  • /facets2
  • /designers1
  • /dev-default1
  • /account-takeover1
  • /jpg1
  • /webp1
  • /gif1
  • /type1
  • /generated1
  • /detail1
  • /designer1
  • /image1
  • /stripe1
  • /other1
  • /butterflies1
  • /bananas1
  • /grapes1
  • /palm1
  • /tropical1
  • /designs1
  • /limit1
  • /sort1
  • /checkout1

Creative ideas + design notes

Commits with substantial prose (≥120 chars) — the rationale behind each move.

2e4f761 · 2026-07-06 · security: harden designer auth + upload 
- fail-closed boot if PUBLIC=1 and PDL_JWT_SECRET is unset/dev-default (cookie-forgery/account-takeover risk)
- cookie now Secure in PUBLIC mode (httpOnly+sameSite already present)
- upload restricted to raster allowlist (png/jpg/webp/gif); SVG dropped (served same-origin -> stored-XSS vector); extension derived from mimetype not client filename; slug sanitized in stored filename
- multer errors (size/type) return clean JSON instead of HTML stack trace
76df8eb · 2026-07-04 · iter-3: deepen credible catalog to 243, harden settlement screen, add pagination 
- build-catalog: credible-first ingestion (uncapped credible, capped novelty); wire in WallpapersBack fork generated/ image source (recovers master #138)
- hardened settlement keyword screen: word-boundary, case-insensitive, checks title+tags+motifs+category; excluded 219 blocked motifs (birds/butterflies/bananas/grapes/palm/tropical)
- catalog now 144 credible / 99 novelty (40.7% novelty, down from 58.3%)
- /api/designs pagination: page/limit -> {designs,count,total,page,limit,hasMore}
- index.html Load more button appends pages, keeps facets+sort+density intact

File tree

75 files tracked. Click any to browse the source at HEAD.

Other build journals

← Patternbank Archive  ·  all 4 projects  ·  Penrose Designs →

Export

commits.csv · feed.atom · project.json · commits.json

rendered in 0ms