Robet Site

repo: ~/Projects/robet-site · 62 commits · 0 in last 24h, 0 in last 7d ·

Search the build

62 commits indexed

  1. dac2f03 2026-09-04 deploy: guard prod-only runtime data from rsync --delete
  2. c318a29 2026-08-25 creds-safe fetch guard: resolve relative fetch vs credential-free location (creds-in-URL trap)
  3. bd5bc35 2026-06-30 deeper Booksy pull: full review TEXT for all 5 reviews (clicked into reviews tab) — real quotes now show in review cards (xss-escaped); 9/9 tests
  4. 6d5052d 2026-06-30 pull from Booksy: booking → his Booksy page, hero → his real shop photo (strong scrim for readability), 20 portfolio photos in gallery, 5★ reviews section; Lighthouse P91/A100/BP100/SEO100, 9/9 tests
  5. 75166d3 2026-06-30 pull from Booksy: 14 real cut photos (inspiration + review_photos) into gallery + wire Book button → Robert's Booksy page (Alumni Barbershop, Sherman Oaks). Standalone — no DW infra
  6. a7ab1ca 2026-06-30 de-entangle friend build from DW infra: remove venturacorridor scheduler/embed entirely, booking → Robert's own scheduler link (empty→contact), CSP tightened to frame-src none, JSON-LD points to own site; canary already reverted to info@DW
  7. 0d21f3b 2026-06-30 auto-save: 2026-06-30T05:28:32 (5 files) — config.json public/app.js public/index.html server.js tests/api.test.mjs
  8. a673808 2026-06-30 robert barber v2: gallery (drop photos in public/photos, /api/photos + placeholders), link-first booking (reliable), AgentAbrams corner credit, migrate email info@DW → robert@agentabrams.com (config + JSON-LD)
  9. 9b96ab4 2026-06-30 ledger: barber re-theme noted
  10. c065dfb 2026-06-30 re-theme to ROBERT BARBER (business identified): hero BOOK A CUT + barber-pole SVG, services Cut/Fade/Beard&Shave, HairSalon JSON-LD, barber OG card, copy throughout; Lighthouse held 100s, 9/9 tests
  11. 2ffa1a4 2026-06-30 loop ledger: round3 items (7)+(4) done — ROUND 3 COMPLETE (8/8); loop paused
  12. 693c574 2026-06-30 round3 item (4): print stylesheet — black-on-white, hide interactive-only elements (nav/CTA/iframe/form), expand booking link to show URL; verified under print media
  13. a6fa980 2026-06-30 round3 item (7): microcopy — unify to first-person singular (Robert) voice: 'Talk to me', 'I'll be in touch', 'my end' (was mixed me/us); matches hero + JSON-LD Person
  14. bf8825d 2026-06-30 loop ledger: round3 item (6) done + deployed
  15. 52b5071 2026-06-30 round3 item (6): footer privacy note 'No cookies. No tracking. No analytics.' — verified true (0 set-cookie, 0 tracking refs) before claiming
  16. 9c3de8a 2026-06-30 loop ledger: round3 item (5) done + deployed
  17. b4b22f4 2026-06-30 round3 item (5): graceful 500 error page — global handler serves styled 500.html for browser GETs (parity with 404), JSON for API; brutalist 500 page
  18. 46ee0e0 2026-06-30 loop ledger: round3 item (3) done + deployed
  19. 3014445 2026-06-30 auto-save: 2026-06-30T02:57:33 (1 files) — public/styles.css
  20. 6adadc3 2026-06-30 loop ledger: round3 item (8) done + deployed
  21. 9411ab2 2026-06-30 round3 item (8): Lighthouse self-audit (real, lh 12.8.2) — was P100/A96/BP100/SEO100; fixed only a11y fail: contact dt red #ff2e1f→#c20010 (3.28→5.63:1 AA) + preconnect venturacorridor; now 100/100/100/100
  22. d256b7d 2026-06-30 loop ledger: round3 item (2) done + deployed
  23. ae066fb 2026-06-30 round3 item (2): CLS — audit found 0 <img> tags (hero is reserved-height CSS bg); measured CLS 0.017→0.000 by pre-filling static heroSub (was empty→JS-hydrated, the sole shift source)
  24. 10dd446 2026-06-30 loop ledger: round3 item (1) done + deployed
  25. dc71cfa 2026-06-30 round3 item (1): real WebKit+Firefox verify FOUND+FIXED a bug — /embed/appointments.js returns text/html (not JS), script-injection threw uncaught SyntaxError; switched to iframe of /book?embed=1 (no X-Frame-Options) + permanent 'open in new tab' escape link; verified 0 syntax errors across chromium/webkit/firefox
  26. 19cdcaa 2026-06-30 round 2 closed (7/8, #17 deferred-gated); round-3 DTD backlog committed (8 items, correctness-first)
  27. 094d2e9 2026-06-30 auto-save: 2026-06-30T00:56:54 (1 files) — OVERNIGHT-LOOP.md
  28. 32a72a3 2026-06-30 loop ledger: round2 item (6) done + deployed
  29. 6e8cd06 2026-06-30 auto-save: 2026-06-30T00:26:45 (2 files) — public/app.js public/styles.css
  30. 967b466 2026-06-29 loop ledger: round2 item (4) done + deployed
  31. ab5c2bb 2026-06-29 round2 item (4): PWA-lite — site.webmanifest (standalone, brand colors) + 180/192/512 brutalist R icons + apple-touch-icon (raster fallback for iOS/Android install)
  32. 7a5ae6e 2026-06-29 loop ledger: round2 item (2) done + deployed
  33. 19f4d34 2026-06-29 round2 item (2): JSON-LD structured data (Person + ScheduleAction → booking URL) + validity test (9/9); CSP-exempt data block
  34. de5f5ab 2026-06-29 loop ledger: round2 item (3) done + deployed
  35. 65be242 2026-06-29 round2 item (3): differentiated static caching — images max-age=86400, html/css/js no-cache + ETag (304 revalidation), updates stay instant without fingerprinting
  36. c54f681 2026-06-29 loop ledger: round2 item (5) done + deployed
  37. b3a76e0 2026-06-29 round2 item (5): contact + admin status messages as ARIA live-regions (role=status, aria-live=polite, aria-atomic) so screen readers announce success/error
  38. e175b73 2026-06-29 loop ledger: round2 item (1) done + deployed
  39. 2b5ea41 2026-06-29 round2 item (1): a11y — skip-to-content link (reveals on focus, jumps to main) + prefers-reduced-motion (disable transitions/transforms/smooth-scroll)
  40. 4b3333d 2026-06-29 loop ledger: round2 item (7) done + deployed
  41. 4b3c114 2026-06-29 round2 item (7): server-side robustness — try/catch on contact+keys writes (graceful 500), global JSON error handler (honors status), process-level guards; +malformed-body test (8/8)
  42. 6e320db 2026-06-29 round-2 DTD backlog committed (8 deeper-polish items, correctness-first)
  43. fda2646 2026-06-29 loop ledger: item (h) done — ROUND 1 complete (9/9)
  44. f3aa79c 2026-06-29 overnight loop item (h): design critique applied — shorter mobile hero (content not buried), lighter mobile shadow, neutralize leftover wallcovering copy to generic booking language
  45. 694340e 2026-06-29 loop ledger: item (i) done + deployed
  46. ba29b47 2026-06-29 overnight loop item (i): zero-dep test suite (node --test) — 7 tests covering brand/config/headers/SEO/404/contact-hardening/admin-auth, all green
  47. cf3d24b 2026-06-29 loop ledger: item (g) done + deployed
  48. 80f29c7 2026-06-29 overnight loop item (g): admin UX — show/hide value toggle + live inline validation (disable Save until valid, name-format hint)
  49. 7e8855d 2026-06-29 loop ledger: item (d) done + deployed
  50. 31ca91f 2026-06-29 overnight loop item (d): SEO — OG/Twitter meta + 1200x630 OG card + SVG favicon + robots.txt + sitemap.xml + canonical
  51. 906d6de 2026-06-29 loop ledger: item (f) done + deployed
  52. 44d16c0 2026-06-29 overnight loop item (f): security headers (CSP/helmet-style) + custom 404 + externalize admin script for strict CSP
  53. f55316d 2026-06-29 loop ledger: item (e) done + deployed
  54. 06d8277 2026-06-29 overnight loop item (e): contact-form hardening — honeypot + email validation + length caps + per-IP rate limit
  55. 5d4d51b 2026-06-29 loop ledger: item (c) done + deployed
  56. ba41017 2026-06-29 overnight loop item (c): mobile polish — kill 320-720px horizontal overflow (min-width:0, wrap long email, responsive logo, overflow-x guard)
  57. 9085abc 2026-06-29 loop ledger: item (b) done + deployed
  58. 672fd87 2026-06-29 overnight loop item (b): hamburger focus-trap + ARIA + verified hero contrast
  59. 56165e8 2026-06-29 overnight loop: item (a) cross-browser smoke — chromium clean, ledger
  60. 64a50fe 2026-06-29 rebrand to ROBERT for robert.agentabrams.com go-live
  61. f9c0545 2026-06-29 rebrand to Designer Wallcoverings appointments + deploy config
  62. 37f01e1 2026-06-29 initial scaffold: brutalist site + Smart Scheduling embed + API-key admin

Authors

Agents used

  • none detected

Skills used

  • /embed2
  • /app2
  • /photos2
  • /styles2
  • /quadrille1
  • /claude1
  • /code1
  • /index1
  • /iframe1
  • /form1
  • /appointments1
  • /html1
  • /book1
  • /webkit1
  • /firefox1
  • /error1
  • /transforms1
  • /smooth-scroll1
  • /catch1
  • /config1
  • /headers1
  • /contact-hardening1
  • /admin-auth1
  • /hide1
  • /helmet-style1

Creative ideas + design notes

Commits with substantial prose (≥120 chars) — the rationale behind each move.

dac2f03 · 2026-09-04 · deploy: guard prod-only runtime data from rsync --delete 
deploy.sh runs 'rsync -az --delete' with no data/ exclude, so a deploy
overwrote the box's runtime file with the local copy and destroyed
everything written since the last deploy. Added a surgical
RSYNC_EXTRA_EXCLUDES for this project's runtime path(s) only, so genuine
build artifacts under data/ keep syncing.

Verified by itemized rsync --dry-run against prod: the runtime file is
listed for transfer WITHOUT the exclude and absent WITH it.

Fleet sweep, TK-11227. Same bug class as the July 2026 artmura/quadrille
mis-target fix and the abramsagency lead-ledger fix (TK-10536).

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013mq9RQtVZZEWvreDqqTgv2
c318a29 · 2026-08-25 · creds-safe fetch guard: resolve relative fetch vs credential-free location (creds-in-URL trap) 
Fleet inoculation — opening this basic-auth app with credentials in the URL
poisoned document.baseURI and made relative fetch('/api/…') throw. Guard resolves
non-absolute request URLs against location instead. Ref: creds-in-url-fetch-guard-fleet-pattern.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

File tree

49 files tracked. Click any to browse the source at HEAD.

Other build journals

← Rigo Line Viewer  ·  all 4 projects  ·  Roll On Fabric Fix →

Export

commits.csv · feed.atom · project.json · commits.json

rendered in 1ms