Proofing Gallery - Releases

• add administrator defaults, per-gallery image ordering, and personal visitor choices with a reset action; sort naturally by filename or by capture date, last modified date, or file size in either direction across galleries, collections, and culling
• index capture dates privately in bounded background jobs, keep images without a capture date at the end, and preserve pagination and the active image when changing the sort order
• add a Fotobox project workflow and authenticated gallery provisioning and JPEG upload API with repeatable requests and stable photo links for QR codes; external photobooth software can integrate with the API and is not included
• preserve each public link's folder restrictions when changing a gallery source; report missing folders and disable links without matching folders until repaired
• recover deleted gallery shares explicitly while retaining link identities and review history, and keep folder names visible in public galleries
• apply public preview language changes consistently, keep concurrent public link listings read-only, and improve action-label contrast
• update frontend, PHP tooling, and GitHub Actions dependencies; strengthen browser setup checks and verify published package attestations

Upgrade note: existing collections keep their original order. Capture-date indexing continues in the background after upgrading; images can move into their dated position as metadata becomes available. Images without a capture date remain visible at the end. Gallery and visitor sort choices do not grant access to additional folders or expose private capture-date metadata.

• make collaborative reviews clearer with separate general feedback and image discussions, labelled review colors, localized headers, and account attribution for signed-in reviewers while retaining guest authorship
• keep ratings, selections, and link restrictions private, and safely refresh open viewers after a user or guest is removed
• preserve image discussions across replies and deletions, while keeping annotations aligned during zoom and improving touch panning
• make updates safer for existing galleries and event deliveries by completing required data updates before the new version becomes active
• update bundled third-party libraries to address known security advisories

• make the mobile gallery and lightbox easier to use with more reliable overlays, touch interaction, navigation, and action controls
• make success feedback and file-conflict resolution clearer and more accessible, including improved screen-reader announcements and a simpler conflict dialog
• improve project settings and reusable preset controls with updated Nextcloud interface components
• harden client-side input handling against case and whitespace variants of malicious onload attributes

• fix upgrades for installations left in maintenance mode by 0.9.0: install 0.9.1 and run the normal Nextcloud upgrade again without deleting galleries, links, feedback, or background jobs
• keep cleanup jobs running reliably after an upgrade so existing galleries can continue their automatic data maintenance
• add an automated recovery test that reproduces the failed 0.9.0 upgrade and verifies recovery with 0.9.1 on SQLite, MariaDB, and PostgreSQL

• add guided photographer projects for showcase, delivery, selection, proofing, receiving files, and private event-folder delivery
• add the Studio workspace model for overview, photos, culling, design, links, review, team, automation, privacy, and history workflows
• add recipient-ledger event delivery with scoped shared/group/private folders, CSV assignment, encrypted contact data, PIN handoff, scheduled release waves, retries, repairs, invitations, and link rotation
• add link- and event-wave-specific download policies for individual files, selections, complete galleries, JPEG presets, watermarks, and contact sheets
• refine public gallery navigation, appearance, story layouts, event albums, private client signals, comparison, annotations, and mobile actions
• document the current settings hierarchy, event delivery behavior, privacy boundaries, operational queues, and screenshot/release workflow
• add a versioned 48-photo fictional Studio library with seven scenario galleries, reproducible browser screenshot coverage, and reviewed App Store image pairs

• rebuild public galleries as platform-adaptive Ionic apps with Geist typography, coral accents, native headers and sheets, swipe paging, and no fixed bottom bar
• add policy-gated whole-gallery ZIP downloads, reels-style slideshow progress, and accessible hover and focus contrast across light and dark Ionic sheets
• speed up multi-file owner uploads with batched session creation, parallel direct streaming for small files, capability-aware browser concurrency, and destination locks limited to the final conflict-safe commit

• allow owner, guest, direct, and Live Push uploads to finalize concurrently by coordinating individual sessions and serializing only the shared destination commit, including conflict-safe names for simultaneous matching files
• return deterministic HTTP 423 upload_busy responses with bounded lock waits and retry only owner finalize requests without retransmitting uploaded chunks
• harden the experimental Context Agent integration with four explicit read-only tools, privacy-minimized results, deterministic schemas, and a reproducible live evaluation workflow
• consolidate risk-aware CI gates, stabilize scheduled scaling and SQLite upgrade coverage, and refresh reviewed frontend, PHP, and Actions dependencies

• keep large custom-domain histories bounded with status-scoped cursor pages, server-side search, responsive incremental loading, and in-place operations
• register periodic maintenance through Nextcloud app metadata so application requests no longer reset cron timestamps or trigger daily jobs repeatedly
• make schema-dependent lifecycle and gallery-list backfills resumable after upgrades, retry failures from a persisted cursor, and report their state in native setup checks and operational health
• harden Calendar, Deck, and Talk review links against duplicate or orphaned resources and distinguish the stable agent API from the experimental Context Agent module in capabilities
• add a checksummed public-release upgrade baseline, full privacy-purge and cron regression coverage, larger scheduled scaling fixtures, and live optional-app integration CI
• pin the persistent Studio environment by platform digest while keeping the disposable development stack on current image tags; add safe refresh and diagnostic workflows that preserve volumes and never migrate implicitly
• resolve release-script CodeQL findings, enforce Node 24.11 before frontend gates, and update actionable transitive JavaScript security fixes
• reorganize owner projects into deep-linkable Overview, Photos, Cull, Design, Share, Review and secondary workspaces, with client results shown before configuration and legacy links normalized automatically
• refine the Editorial Darkroom with a focused loupe/inspector split, deliberate tap-to-toggle and swipe navigation, and viewport-safe desktop and mobile chrome
• add deep-linkable administration categories, live operational health refresh, and a shared mobile-safe Save/Discard bar for administrator and personal settings

• radically modernize public galleries with configurable compact and immersive openings, refined glass surfaces, responsive controls, and animated viewing
• preserve complete portrait and landscape photographs in justified grids and replace cropped list strips with a useful photographic contact sheet
• make the lightbox touch-safe with tap-to-toggle controls, bidirectional swipe navigation, pinch zoom, two visible arrows, and a hideable session filmstrip
• keep culling navigation and virtualized side or bottom filmstrips within the viewport across large collections and narrow mobile layouts
• add a reproducible 30-photo local Studio library and six polished desktop and mobile screenshots for the Nextcloud App Store

• repair legacy gallery share tokens with a new idempotent upgrade migration while preserving existing primary public links and archived-gallery safety
• update the transitive build-time fast-uri dependency to 3.1.5 to resolve GHSA-7p8r-x3mc-p8w7 without unrelated lockfile churn
• stabilize owner-dashboard visual verification and retain Playwright reports, traces, screenshots, and videos when browser CI fails
• add reproducible signed packages and protected publication to the Nextcloud App Store alongside checksums, an SPDX SBOM, and artifact attestations

• add administrator defaults, per-gallery image ordering, and personal visitor choices with a reset action; sort naturally by filename or by capture date, last modified date, or file size in either direction across galleries, collections, and culling
• index capture dates privately in bounded background jobs, keep images without a capture date at the end, and preserve pagination and the active image when changing the sort order
• add a Fotobox project workflow and authenticated gallery provisioning and JPEG upload API with repeatable requests and stable photo links for QR codes; external photobooth software can integrate with the API and is not included
• preserve each public link's folder restrictions when changing a gallery source; report missing folders and disable links without matching folders until repaired
• recover deleted gallery shares explicitly while retaining link identities and review history, and keep folder names visible in public galleries
• apply public preview language changes consistently, keep concurrent public link listings read-only, and improve action-label contrast
• update frontend, PHP tooling, and GitHub Actions dependencies; strengthen browser setup checks and verify published package attestations

Upgrade note: existing collections keep their original order. Capture-date indexing continues in the background after upgrading; images can move into their dated position as metadata becomes available. Images without a capture date remain visible at the end. Gallery and visitor sort choices do not grant access to additional folders or expose private capture-date metadata.

• make collaborative reviews clearer with separate general feedback and image discussions, labelled review colors, localized headers, and account attribution for signed-in reviewers while retaining guest authorship
• keep ratings, selections, and link restrictions private, and safely refresh open viewers after a user or guest is removed
• preserve image discussions across replies and deletions, while keeping annotations aligned during zoom and improving touch panning
• make updates safer for existing galleries and event deliveries by completing required data updates before the new version becomes active
• update bundled third-party libraries to address known security advisories

• make the mobile gallery and lightbox easier to use with more reliable overlays, touch interaction, navigation, and action controls
• make success feedback and file-conflict resolution clearer and more accessible, including improved screen-reader announcements and a simpler conflict dialog
• improve project settings and reusable preset controls with updated Nextcloud interface components
• harden client-side input handling against case and whitespace variants of malicious onload attributes

• fix upgrades for installations left in maintenance mode by 0.9.0: install 0.9.1 and run the normal Nextcloud upgrade again without deleting galleries, links, feedback, or background jobs
• keep cleanup jobs running reliably after an upgrade so existing galleries can continue their automatic data maintenance
• add an automated recovery test that reproduces the failed 0.9.0 upgrade and verifies recovery with 0.9.1 on SQLite, MariaDB, and PostgreSQL

• add guided photographer projects for showcase, delivery, selection, proofing, receiving files, and private event-folder delivery
• add the Studio workspace model for overview, photos, culling, design, links, review, team, automation, privacy, and history workflows
• add recipient-ledger event delivery with scoped shared/group/private folders, CSV assignment, encrypted contact data, PIN handoff, scheduled release waves, retries, repairs, invitations, and link rotation
• add link- and event-wave-specific download policies for individual files, selections, complete galleries, JPEG presets, watermarks, and contact sheets
• refine public gallery navigation, appearance, story layouts, event albums, private client signals, comparison, annotations, and mobile actions
• document the current settings hierarchy, event delivery behavior, privacy boundaries, operational queues, and screenshot/release workflow
• add a versioned 48-photo fictional Studio library with seven scenario galleries, reproducible browser screenshot coverage, and reviewed App Store image pairs

• rebuild public galleries as platform-adaptive Ionic apps with Geist typography, coral accents, native headers and sheets, swipe paging, and no fixed bottom bar
• add policy-gated whole-gallery ZIP downloads, reels-style slideshow progress, and accessible hover and focus contrast across light and dark Ionic sheets
• speed up multi-file owner uploads with batched session creation, parallel direct streaming for small files, capability-aware browser concurrency, and destination locks limited to the final conflict-safe commit

• allow owner, guest, direct, and Live Push uploads to finalize concurrently by coordinating individual sessions and serializing only the shared destination commit, including conflict-safe names for simultaneous matching files
• return deterministic HTTP 423 upload_busy responses with bounded lock waits and retry only owner finalize requests without retransmitting uploaded chunks
• harden the experimental Context Agent integration with four explicit read-only tools, privacy-minimized results, deterministic schemas, and a reproducible live evaluation workflow
• consolidate risk-aware CI gates, stabilize scheduled scaling and SQLite upgrade coverage, and refresh reviewed frontend, PHP, and Actions dependencies

• keep large custom-domain histories bounded with status-scoped cursor pages, server-side search, responsive incremental loading, and in-place operations
• register periodic maintenance through Nextcloud app metadata so application requests no longer reset cron timestamps or trigger daily jobs repeatedly
• make schema-dependent lifecycle and gallery-list backfills resumable after upgrades, retry failures from a persisted cursor, and report their state in native setup checks and operational health
• harden Calendar, Deck, and Talk review links against duplicate or orphaned resources and distinguish the stable agent API from the experimental Context Agent module in capabilities
• add a checksummed public-release upgrade baseline, full privacy-purge and cron regression coverage, larger scheduled scaling fixtures, and live optional-app integration CI
• pin the persistent Studio environment by platform digest while keeping the disposable development stack on current image tags; add safe refresh and diagnostic workflows that preserve volumes and never migrate implicitly
• resolve release-script CodeQL findings, enforce Node 24.11 before frontend gates, and update actionable transitive JavaScript security fixes
• reorganize owner projects into deep-linkable Overview, Photos, Cull, Design, Share, Review and secondary workspaces, with client results shown before configuration and legacy links normalized automatically
• refine the Editorial Darkroom with a focused loupe/inspector split, deliberate tap-to-toggle and swipe navigation, and viewport-safe desktop and mobile chrome
• add deep-linkable administration categories, live operational health refresh, and a shared mobile-safe Save/Discard bar for administrator and personal settings

• radically modernize public galleries with configurable compact and immersive openings, refined glass surfaces, responsive controls, and animated viewing
• preserve complete portrait and landscape photographs in justified grids and replace cropped list strips with a useful photographic contact sheet
• make the lightbox touch-safe with tap-to-toggle controls, bidirectional swipe navigation, pinch zoom, two visible arrows, and a hideable session filmstrip
• keep culling navigation and virtualized side or bottom filmstrips within the viewport across large collections and narrow mobile layouts
• add a reproducible 30-photo local Studio library and six polished desktop and mobile screenshots for the Nextcloud App Store

• repair legacy gallery share tokens with a new idempotent upgrade migration while preserving existing primary public links and archived-gallery safety
• update the transitive build-time fast-uri dependency to 3.1.5 to resolve GHSA-7p8r-x3mc-p8w7 without unrelated lockfile churn
• stabilize owner-dashboard visual verification and retain Playwright reports, traces, screenshots, and videos when browser CI fails
• add reproducible signed packages and protected publication to the Nextcloud App Store alongside checksums, an SPDX SBOM, and artifact attestations

• add administrator defaults, per-gallery image ordering, and personal visitor choices with a reset action; sort naturally by filename or by capture date, last modified date, or file size in either direction across galleries, collections, and culling
• index capture dates privately in bounded background jobs, keep images without a capture date at the end, and preserve pagination and the active image when changing the sort order
• add a Fotobox project workflow and authenticated gallery provisioning and JPEG upload API with repeatable requests and stable photo links for QR codes; external photobooth software can integrate with the API and is not included
• preserve each public link's folder restrictions when changing a gallery source; report missing folders and disable links without matching folders until repaired
• recover deleted gallery shares explicitly while retaining link identities and review history, and keep folder names visible in public galleries
• apply public preview language changes consistently, keep concurrent public link listings read-only, and improve action-label contrast
• update frontend, PHP tooling, and GitHub Actions dependencies; strengthen browser setup checks and verify published package attestations

Upgrade note: existing collections keep their original order. Capture-date indexing continues in the background after upgrading; images can move into their dated position as metadata becomes available. Images without a capture date remain visible at the end. Gallery and visitor sort choices do not grant access to additional folders or expose private capture-date metadata.

• make collaborative reviews clearer with separate general feedback and image discussions, labelled review colors, localized headers, and account attribution for signed-in reviewers while retaining guest authorship
• keep ratings, selections, and link restrictions private, and safely refresh open viewers after a user or guest is removed
• preserve image discussions across replies and deletions, while keeping annotations aligned during zoom and improving touch panning
• make updates safer for existing galleries and event deliveries by completing required data updates before the new version becomes active
• update bundled third-party libraries to address known security advisories

• make the mobile gallery and lightbox easier to use with more reliable overlays, touch interaction, navigation, and action controls
• make success feedback and file-conflict resolution clearer and more accessible, including improved screen-reader announcements and a simpler conflict dialog
• improve project settings and reusable preset controls with updated Nextcloud interface components
• harden client-side input handling against case and whitespace variants of malicious onload attributes

• fix upgrades for installations left in maintenance mode by 0.9.0: install 0.9.1 and run the normal Nextcloud upgrade again without deleting galleries, links, feedback, or background jobs
• keep cleanup jobs running reliably after an upgrade so existing galleries can continue their automatic data maintenance
• add an automated recovery test that reproduces the failed 0.9.0 upgrade and verifies recovery with 0.9.1 on SQLite, MariaDB, and PostgreSQL

• add guided photographer projects for showcase, delivery, selection, proofing, receiving files, and private event-folder delivery
• add the Studio workspace model for overview, photos, culling, design, links, review, team, automation, privacy, and history workflows
• add recipient-ledger event delivery with scoped shared/group/private folders, CSV assignment, encrypted contact data, PIN handoff, scheduled release waves, retries, repairs, invitations, and link rotation
• add link- and event-wave-specific download policies for individual files, selections, complete galleries, JPEG presets, watermarks, and contact sheets
• refine public gallery navigation, appearance, story layouts, event albums, private client signals, comparison, annotations, and mobile actions
• document the current settings hierarchy, event delivery behavior, privacy boundaries, operational queues, and screenshot/release workflow
• add a versioned 48-photo fictional Studio library with seven scenario galleries, reproducible browser screenshot coverage, and reviewed App Store image pairs

• rebuild public galleries as platform-adaptive Ionic apps with Geist typography, coral accents, native headers and sheets, swipe paging, and no fixed bottom bar
• add policy-gated whole-gallery ZIP downloads, reels-style slideshow progress, and accessible hover and focus contrast across light and dark Ionic sheets
• speed up multi-file owner uploads with batched session creation, parallel direct streaming for small files, capability-aware browser concurrency, and destination locks limited to the final conflict-safe commit

• allow owner, guest, direct, and Live Push uploads to finalize concurrently by coordinating individual sessions and serializing only the shared destination commit, including conflict-safe names for simultaneous matching files
• return deterministic HTTP 423 upload_busy responses with bounded lock waits and retry only owner finalize requests without retransmitting uploaded chunks
• harden the experimental Context Agent integration with four explicit read-only tools, privacy-minimized results, deterministic schemas, and a reproducible live evaluation workflow
• consolidate risk-aware CI gates, stabilize scheduled scaling and SQLite upgrade coverage, and refresh reviewed frontend, PHP, and Actions dependencies

• keep large custom-domain histories bounded with status-scoped cursor pages, server-side search, responsive incremental loading, and in-place operations
• register periodic maintenance through Nextcloud app metadata so application requests no longer reset cron timestamps or trigger daily jobs repeatedly
• make schema-dependent lifecycle and gallery-list backfills resumable after upgrades, retry failures from a persisted cursor, and report their state in native setup checks and operational health
• harden Calendar, Deck, and Talk review links against duplicate or orphaned resources and distinguish the stable agent API from the experimental Context Agent module in capabilities
• add a checksummed public-release upgrade baseline, full privacy-purge and cron regression coverage, larger scheduled scaling fixtures, and live optional-app integration CI
• pin the persistent Studio environment by platform digest while keeping the disposable development stack on current image tags; add safe refresh and diagnostic workflows that preserve volumes and never migrate implicitly
• resolve release-script CodeQL findings, enforce Node 24.11 before frontend gates, and update actionable transitive JavaScript security fixes
• reorganize owner projects into deep-linkable Overview, Photos, Cull, Design, Share, Review and secondary workspaces, with client results shown before configuration and legacy links normalized automatically
• refine the Editorial Darkroom with a focused loupe/inspector split, deliberate tap-to-toggle and swipe navigation, and viewport-safe desktop and mobile chrome
• add deep-linkable administration categories, live operational health refresh, and a shared mobile-safe Save/Discard bar for administrator and personal settings

• radically modernize public galleries with configurable compact and immersive openings, refined glass surfaces, responsive controls, and animated viewing
• preserve complete portrait and landscape photographs in justified grids and replace cropped list strips with a useful photographic contact sheet
• make the lightbox touch-safe with tap-to-toggle controls, bidirectional swipe navigation, pinch zoom, two visible arrows, and a hideable session filmstrip
• keep culling navigation and virtualized side or bottom filmstrips within the viewport across large collections and narrow mobile layouts
• add a reproducible 30-photo local Studio library and six polished desktop and mobile screenshots for the Nextcloud App Store

• repair legacy gallery share tokens with a new idempotent upgrade migration while preserving existing primary public links and archived-gallery safety
• update the transitive build-time fast-uri dependency to 3.1.5 to resolve GHSA-7p8r-x3mc-p8w7 without unrelated lockfile churn
• stabilize owner-dashboard visual verification and retain Playwright reports, traces, screenshots, and videos when browser CI fails
• add reproducible signed packages and protected publication to the Nextcloud App Store alongside checksums, an SPDX SBOM, and artifact attestations