- CI pinned Node 20, but `node --test` with type stripping needs 22.6, so the workflow could never have gone green. CI and `engines` now say 22.6. - `docker compose up -d` failed on the documented path: the compose files require DB_PASSWORD and .env.example never mentioned it. Documented, and the README no longer claims "three secrets". - The secret scanner treated any comment line as safe, so a pasted `.env` fragment — the usual way a key gets committed — slipped through. Verified against planted keys before and after. - Module pages were not guarded: with KLARBILD_MODULES=print a signed-in user could still open /shares, /library and /queue and read about features the instance does not have. They now redirect, matching the API's 404 behaviour. - German left in the English build: `bild.<ext>` as a download fallback, and 31 t() keys with no German at all — the whole main navigation among them, so a German instance rendered its nav in English. Dictionary now covers every key in the source (1,067 entries). - Third-party names removed from the data as well as the labels: the `theframe` format id is now `tv169`, and the dead Cricut admin field is gone. - Dockerfile ignored the committed lockfile; it now copies it and uses `npm ci`. - Dropped an unused dependency (@aws-sdk/s3-request-presigner — storage.ts explains why presigned URLs are not needed), a dead `/g/` entry in the unauthenticated path list, and an undocumented N8N_WEBHOOK_URL that nothing read. Documented TRUSTED_PROXIES, which the rate limiter does read. - Migration 004 still had "nas" in its filename; README said A6–A2 where the list runs A6–A1; two committed screenshots were referenced nowhere. 124 tests green, type check clean, build clean, secret scan clean. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Nh4A79bbqT9dcd2inzYUdg
71 lines
1.9 KiB
JSON
71 lines
1.9 KiB
JSON
{
|
|
"name": "klarbild",
|
|
"version": "1.0.0",
|
|
"description": "Self-hosted print studio: put pictures on paper at exactly the size you asked for. Sheet layout with crop marks, tiling, 1:1 PDF. Optional AI, delivery, sharing and Telegram modules.",
|
|
"license": "AGPL-3.0-only",
|
|
"author": "Till Heidrich",
|
|
"homepage": "https://github.com/tillheidrich/klarbild",
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "https://github.com/tillheidrich/klarbild.git"
|
|
},
|
|
"bugs": {
|
|
"url": "https://github.com/tillheidrich/klarbild/issues"
|
|
},
|
|
"keywords": [
|
|
"print",
|
|
"pdf",
|
|
"photo",
|
|
"passport-photo",
|
|
"self-hosted",
|
|
"astro",
|
|
"crop-marks",
|
|
"poster",
|
|
"tiling",
|
|
"sheet-layout"
|
|
],
|
|
"type": "module",
|
|
"engines": {
|
|
"node": ">=22.6"
|
|
},
|
|
"scripts": {
|
|
"dev": "astro dev",
|
|
"build": "astro build",
|
|
"start": "node ./dist/server/entry.mjs",
|
|
"astro": "astro",
|
|
"test": "node --experimental-strip-types --test tests/*.test.ts",
|
|
"typecheck": "tsc --noEmit",
|
|
"scan": "node scripts/secret-scan.mjs"
|
|
},
|
|
"dependencies": {
|
|
"@astrojs/node": "^9.1.3",
|
|
"@astrojs/react": "^4.2.1",
|
|
"@aws-sdk/client-s3": "^3.700.0",
|
|
"@fontsource/space-grotesk": "^5.1.0",
|
|
"@fontsource/space-mono": "^5.1.0",
|
|
"archiver": "^7.0.1",
|
|
"argon2": "^0.41.1",
|
|
"astro": "^5.5.0",
|
|
"basic-ftp": "^5.0.5",
|
|
"grammy": "^1.30.0",
|
|
"heic-convert": "^2.1.0",
|
|
"nodemailer": "^9.1.0",
|
|
"pdf-lib": "^1.17.1",
|
|
"pg": "^8.13.1",
|
|
"pg-boss": "^10.1.5",
|
|
"react": "^19.0.0",
|
|
"react-dom": "^19.0.0",
|
|
"sharp": "^0.33.5",
|
|
"ssh2-sftp-client": "^11.0.0"
|
|
},
|
|
"devDependencies": {
|
|
"@types/node": "^26.5.1",
|
|
"@types/nodemailer": "^8.0.1",
|
|
"@types/pg": "^8.11.10",
|
|
"@types/react": "^19.0.0",
|
|
"@types/react-dom": "^19.0.0",
|
|
"@types/ssh2-sftp-client": "^9.0.6",
|
|
"typescript": "^5.7.2"
|
|
}
|
|
}
|