portfolio-next/docs/HANDOFF.md

Handoff — 2026-11-11 (live; audit in progress)

Where development stopped, and how to pick it up. Delete or rewrite this file when the next session starts.

State

• The site is live at lucaswinther.info (behind Cloudflare) since the DNS cutover on 2026-11-10; the 2021 site is at old.lucaswinther.info. On 2026-11-11 /status reported all four sources ok. Older lines below that say "not deployed" or "never run live" describe the state before that.

• Audit 2026-11-11: docs/audits/2026-11-11-audit.md lists 24 findings with a status each. Fixed so far on fix/audit-quick-wins: 2, 6, 7, 18, 19, 21.

• Spec 005 is merged and pushed (2026-11-10): the start page cassette shows a strip of the song cover with title and artist; the collage stacks (polaroid over cassette and note); the grain is a pre-rendered tile mask. The owner's hover-lag feel is written up in docs/TODO.md (his browser caps at ~70–80 fps).

• Specs 003 and 004 are merged into main and pushed (2026-11-10, owner-approved): last film from Trakt and the week's top track from ListenBrainz in the "right now" strip, alternating film posters, 4:3 band photo, song cards without the record. bun test 184 pass, Playwright 129 pass / 9 skipped. Production needs LISTENBRAINZ_USER=stereotypicalcat (docs/DEPLOY.md). The Trakt history/ratings requests haven't run live yet. Content repo main is at 2b89137 (Summer Blooms Without You plays from Spotify).

• Spec 002 (items in more than one interest, soundtrack tray, band photo, whole-cover comics) is merged into main and pushed (2026-11-10, owner-approved). bun test 168 pass, typecheck clean.

• Content repo portfolio-next-content (~/portfolio-next-content) merged into main and pushed (head dd325d6): contract: 2, five new items (Dear Evan Hansen, A Whisker Away, Always Never, Summer Blooms Without You, Saltlakridserne: photo only, no link, as the owner said the Facebook URL isn't important; a landscape header photo would crop better than the portrait one). Dear Evan Hansen's tray plays "Part Of Me" (Broadway Cast Recording, Deluxe) on Spotify, the owner's pick. Deploy order: app first, then this content (docs/DEPLOY.md).

• Spec 001 and its follow-ups are merged into main and pushed; not deployed (owner wires homelab, OpenBao, DNS).

Next steps

1. Owner works through docs/TODO.md → "Before go-live (owner)": real project dates, years, intro and personal_intro, AU projects' AI levels and un-drafting, comic images, Junkwraith quote check, CV PDF, Ghost/Trakt/Hardcover keys (and a public Trakt profile), DNS cutover, the blog-redirect decision.
2. First live build with real keys: check /status → sources. The Ghost, Trakt and Hardcover modules (src/sources/) have never run against the live APIs. HARDCOVER_QUERY is the most likely to need fixing.
3. Agent-doable backlog: docs/TODO.md → "Next" and "Review follow-ups".

Where things are

• Decisions and why: docs/DECISIONS.md. Map and invariants: docs/ARCHITECTURE.md. Agent rules and commands: AGENTS.md. Content format: docs/CONTENT-CONTRACT.md. Taste log and every mockup verdict: docs/inspiration.md.
• Chosen mockups (visual truth): mockups/nav-d.html, mockups/tech-r3-c.html, mockups/personal-r2-b.html. The sister repo ~/commission-compass is the pattern for runtime, CI and deploy.
• Local scratch, git-ignored, safe to delete: .superpowers/ (brainstorm mockup sessions and the finished plan's ledger sdd/001-site/; the repo's permission rules block agents from rm -r, so delete it by hand). Same for old build output in .tmp/.

Working with the owner

• Once he approves a design, carry it through spec → plan → execution without review stops, and report decisions at the end.
• He reacts best to real mockups; taste lines: calm until touched, no loading screens or game feel, nothing selling, no AI-default look. Not too sleek: he picked tech-r3-c over the polished round 4.
• Never invent facts about him; unknowns stay out or go in as drafts.
• He reaches this machine over WireGuard at 10.20.20.2 (the visual companion was served there).