Server (spans the v0.6→v0.8 arc in one file):
- template-manager mounted with the productsStore catalog, PNG-only
mockup multer, facet personalization config (§R10, FACET_KEY-gated,
inert when unset), and the marketing-preview drainer (2s tick, one
render per tick, .unref()).
- auth-manager bootstrap: DATABASE_URL gates the pg Pool, migrations,
and mountAuth (magic-link customer + Google SSO admin + facet);
absent DATABASE_URL logs a warning and the host boots without auth.
- goods-editor design persistence (#23): idempotent 001_designs.sql
applied at boot, db handle passed to mountEditorApi so /api/designs
routes mount; without Postgres the client falls back to
cart-without-design_id.
- reference-protected TTL sweep (#24): before each pass, every
/uploads/ basename referenced by template-manager JSON or persisted
designs is collected and protected, and exports/designs (db-driven
lifecycle, unrecoverable sources) is skipped entirely. Sweep kickoff
moves below the bootstrap (pgPool TDZ). sweep-worker.mjs is the
standalone process variant for production.
Client: main.jsx wraps the tree in AuthProvider (single /api/auth/me
fetch shared by useCustomer/useAdmin, degrades on 404) and mounts
AppRouter. eslint bumps server.js to ecmaVersion 2022 (top-level
await); .env.example documents the full v0.8 env surface.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
index.html now loads /api/fonts/fonts.css, synthesized at request time
by goods-editor's mountEditorApi from the host's fonts/ directory
(populated via fetch-fonts in goods-editor-module — the host-local
fetch script shrinks to a pointer). Shipped synchronously in <head>
on purpose: the module's runtime injector races first paint and the
editor's text measurement gives wrong answers against fallback
metrics until real fonts load.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
