feat(catalogue): UX improvements and bug fixes

- Persist audio filter in URL (?audio=1) via history.replaceState
- Show total novel count in browse mode subtitle
- Close filter panel automatically on Apply
- Replace missing-cover SVG placeholder with styled first-letter avatar
- Add forbidden scrape badge to list view (was missing, grid had it)
- Carry audio param through applyFilters() navigation

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.gitea/workflows/release.yaml

@@ -55,102 +55,7 @@ jobs:
       - name: Build
         run: npm run build
 
-      - name: Upload build artifacts
-        uses: actions/upload-artifact@v3
-        with:
-          name: ui-build
-          path: ui/build
-          retention-days: 1
-
-  # ── ui: source map upload ─────────────────────────────────────────────────────
-  # Commented out — re-enable when GlitchTip source map uploads are needed again.
-  #
-  # upload-sourcemaps:
-  #   name: Upload source maps
-  #   runs-on: ubuntu-latest
-  #   needs: [check-ui]
-  #   steps:
-  #     - name: Compute release version (strip leading v)
-  #       id: ver
-  #       run: |
-  #         V="${{ gitea.ref_name }}"
-  #         echo "version=${V#v}" >> "$GITHUB_OUTPUT"
-  #
-  #     - name: Download build artifacts
-  #       uses: actions/download-artifact@v3
-  #       with:
-  #         name: ui-build
-  #         path: build
-  #
-  #     - name: Install sentry-cli
-  #       run: npm install -g @sentry/cli
-  #
-  #     - name: Inject debug IDs into build artifacts
-  #       run: sentry-cli sourcemaps inject ./build
-  #       env:
-  #         SENTRY_URL: https://errors.libnovel.cc/
-  #         SENTRY_AUTH_TOKEN: ${{ secrets.GLITCHTIP_AUTH_TOKEN }}
-  #         SENTRY_ORG: libnovel
-  #         SENTRY_PROJECT: ui
-  #
-  #     - name: Upload injected build (for docker-ui)
-  #       uses: actions/upload-artifact@v3
-  #       with:
-  #         name: ui-build-injected
-  #         path: build
-  #         retention-days: 1
-  #
-  #     - name: Create GlitchTip release
-  #       run: sentry-cli releases new ${{ steps.ver.outputs.version }}
-  #       env:
-  #         SENTRY_URL: https://errors.libnovel.cc/
-  #         SENTRY_AUTH_TOKEN: ${{ secrets.GLITCHTIP_AUTH_TOKEN }}
-  #         SENTRY_ORG: libnovel
-  #         SENTRY_PROJECT: ui
-  #
-  #     - name: Upload source maps to GlitchTip
-  #       run: sentry-cli sourcemaps upload ./build --release ${{ steps.ver.outputs.version }}
-  #       env:
-  #         SENTRY_URL: https://errors.libnovel.cc/
-  #         SENTRY_AUTH_TOKEN: ${{ secrets.GLITCHTIP_AUTH_TOKEN }}
-  #         SENTRY_ORG: libnovel
-  #         SENTRY_PROJECT: ui
-  #
-  #     - name: Finalize GlitchTip release
-  #       run: sentry-cli releases finalize ${{ steps.ver.outputs.version }}
-  #       env:
-  #         SENTRY_URL: https://errors.libnovel.cc/
-  #         SENTRY_AUTH_TOKEN: ${{ secrets.GLITCHTIP_AUTH_TOKEN }}
-  #         SENTRY_ORG: libnovel
-  #         SENTRY_PROJECT: ui
-  #
-  #     - name: Prune old GlitchTip releases (keep latest 10)
-  #       run: |
-  #         set -euo pipefail
-  #         KEEP=10
-  #         OLD=$(curl -sf \
-  #           -H "Authorization: Bearer $SENTRY_AUTH_TOKEN" \
-  #           "$SENTRY_URL/api/0/organizations/$SENTRY_ORG/releases/?project=$SENTRY_PROJECT&per_page=100" \
-  #           | python3 -c "
-  #         import sys, json
-  #         releases = json.load(sys.stdin)
-  #         for r in releases[$KEEP:]:
-  #             print(r['version'])
-  #         " KEEP=$KEEP)
-  #         for ver in $OLD; do
-  #           echo "Deleting old release: $ver"
-  #           sentry-cli releases delete "$ver" || true
-  #         done
-  #       env:
-  #         SENTRY_URL: https://errors.libnovel.cc
-  #         SENTRY_AUTH_TOKEN: ${{ secrets.GLITCHTIP_AUTH_TOKEN }}
-  #         SENTRY_ORG: libnovel
-  #         SENTRY_PROJECT: ui
-
   # ── docker: build + push all images via docker bake ──────────────────────────
-  # docker-bake.hcl owns all tag logic (semver, major.minor, latest) via HCL
-  # functions — no docker/metadata-action needed.  BuildKit builds all five
-  # targets in parallel, sharing the Go builder stage across backend/runner/pocketbase.
   docker:
     name: Docker
     runs-on: ubuntu-latest
@@ -166,16 +71,13 @@ jobs:
           username: ${{ secrets.DOCKER_USER }}
           password: ${{ secrets.DOCKER_TOKEN }}
 
-      - name: Download ui build artifacts
-        uses: actions/download-artifact@v3
-        with:
-          name: ui-build
-          path: ui/build
-
-      - name: Allow build/ into Docker context (override .dockerignore)
+      - name: Compute version tags
+        id: ver
         run: |
-          grep -v '^build$' ui/.dockerignore > ui/.dockerignore.tmp
-          mv ui/.dockerignore.tmp ui/.dockerignore
+          V="${{ gitea.ref_name }}"
+          VER="${V#v}"
+          echo "version=$VER" >> "$GITHUB_OUTPUT"
+          echo "major_minor=$(echo "$VER" | cut -d. -f1-2)" >> "$GITHUB_OUTPUT"
 
       - name: Build and push all images
         uses: docker/bake-action@v6
@@ -184,7 +86,8 @@ jobs:
           set: |
             *.output=type=image,push=true
         env:
-          GIT_TAG: ${{ gitea.ref_name }}
+          VERSION: ${{ steps.ver.outputs.version }}
+          MAJOR_MINOR: ${{ steps.ver.outputs.major_minor }}
           COMMIT: ${{ gitea.sha }}
           BUILD_TIME: ${{ gitea.event.head_commit.timestamp }}
 

CLAUDE.md

@@ -2,6 +2,17 @@
 
 This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
 
+## Environment / Secrets
+
+All project environment variables are stored in **Doppler**. When you need to access any secret or env var (e.g. API tokens, database URLs, credentials), fetch them via:
+
+```bash
+doppler run -- <command>        # inject all secrets into a command
+doppler secrets get SECRET_NAME # inspect a specific secret
+```
+
+Never use `.env` files. Do not ask the user to provide secrets manually — they are available via Doppler.
+
 ## Commands
 
 ### Docker (via `just` — the primary way to run services)

docker-bake.hcl

@@ -1,56 +1,23 @@
 # docker-bake.hcl — defines all five production images.
 #
-# Used by CI (docker/bake-action) to build and push all images in one call,
-# with shared BuildKit cache and maximum parallelism:
-#   - backend, runner, pocketbase share the Go builder stage (built once)
-#   - caddy and ui build independently in parallel alongside the Go targets
+# CI passes version info as environment variables; locally everything gets :dev tags.
 #
-# Local build (push=false by default):
+# Local build (no push):
 #   docker buildx bake
 #
-# CI passes GIT_TAG (e.g. "v4.1.3") and the bake file computes all three tag
-# variants (full semver, major.minor, latest) — no docker/metadata-action needed.
+# CI environment variables: VERSION, MAJOR_MINOR, COMMIT, BUILD_TIME
 
-# ── Variables injected by CI ──────────────────────────────────────────────────
-
-variable "DOCKER_USER" { default = "kalekber" }
-
-# Full git tag, e.g. "v4.1.3".  CI passes this via --set or env.
-# Locally defaults to "dev" so images get a :dev tag.
-variable "GIT_TAG" { default = "dev" }
-
-variable "COMMIT"     { default = "unknown" }
-variable "BUILD_TIME" { default = "" }
-
-# ── Tag helpers ───────────────────────────────────────────────────────────────
-
-locals {
-  # Strip leading "v": "v4.1.3" → "4.1.3"
-  version = trimprefix(GIT_TAG, "v")
-
-  # major.minor only: "4.1.3" → "4.1"
-  major_minor = join(".", slice(split(".", local.version), 0, 2))
-
-  # true when building a real release tag (not local "dev" build)
-  is_release = GIT_TAG != "dev"
-}
-
-# Return the three standard tags for a given image repo.
-# Always includes :latest and the full version; skips major.minor for dev builds.
-function "img_tags" {
-  params = [repo]
-  result = local.is_release ? [
-    "${repo}:${local.version}",
-    "${repo}:${local.major_minor}",
-    "${repo}:latest",
-  ] : ["${repo}:dev"]
-}
+variable "DOCKER_USER"  { default = "kalekber" }
+variable "VERSION"      { default = "dev" }    # e.g. "4.1.6"  (no leading v)
+variable "MAJOR_MINOR"  { default = "dev" }    # e.g. "4.1"
+variable "COMMIT"       { default = "unknown" }
+variable "BUILD_TIME"   { default = "" }
 
 # ── Shared defaults ───────────────────────────────────────────────────────────
 
 target "_defaults" {
   pull     = true
-  # CI overrides this to push=true via --set *.output=type=image,push=true
+  # CI overrides to push=true via --set *.output=type=image,push=true
   output   = ["type=image,push=false"]
   cache-to = ["type=inline"]
 }
@@ -61,10 +28,14 @@ target "backend" {
   inherits   = ["_defaults"]
   context    = "backend"
   target     = "backend"
-  tags       = img_tags("${DOCKER_USER}/libnovel-backend")
+  tags       = [
+    "${DOCKER_USER}/libnovel-backend:${VERSION}",
+    "${DOCKER_USER}/libnovel-backend:${MAJOR_MINOR}",
+    "${DOCKER_USER}/libnovel-backend:latest",
+  ]
   cache-from = ["type=registry,ref=${DOCKER_USER}/libnovel-backend:latest"]
   args = {
-    VERSION = local.version
+    VERSION = VERSION
     COMMIT  = COMMIT
   }
 }
@@ -73,10 +44,14 @@ target "runner" {
   inherits   = ["_defaults"]
   context    = "backend"
   target     = "runner"
-  tags       = img_tags("${DOCKER_USER}/libnovel-runner")
+  tags       = [
+    "${DOCKER_USER}/libnovel-runner:${VERSION}",
+    "${DOCKER_USER}/libnovel-runner:${MAJOR_MINOR}",
+    "${DOCKER_USER}/libnovel-runner:latest",
+  ]
   cache-from = ["type=registry,ref=${DOCKER_USER}/libnovel-runner:latest"]
   args = {
-    VERSION = local.version
+    VERSION = VERSION
     COMMIT  = COMMIT
   }
 }
@@ -85,7 +60,11 @@ target "pocketbase" {
   inherits   = ["_defaults"]
   context    = "backend"
   target     = "pocketbase"
-  tags       = img_tags("${DOCKER_USER}/libnovel-pocketbase")
+  tags       = [
+    "${DOCKER_USER}/libnovel-pocketbase:${VERSION}",
+    "${DOCKER_USER}/libnovel-pocketbase:${MAJOR_MINOR}",
+    "${DOCKER_USER}/libnovel-pocketbase:latest",
+  ]
   cache-from = ["type=registry,ref=${DOCKER_USER}/libnovel-pocketbase:latest"]
 }
 
@@ -94,13 +73,16 @@ target "pocketbase" {
 target "ui" {
   inherits   = ["_defaults"]
   context    = "ui"
-  tags       = img_tags("${DOCKER_USER}/libnovel-ui")
+  tags       = [
+    "${DOCKER_USER}/libnovel-ui:${VERSION}",
+    "${DOCKER_USER}/libnovel-ui:${MAJOR_MINOR}",
+    "${DOCKER_USER}/libnovel-ui:latest",
+  ]
   cache-from = ["type=registry,ref=${DOCKER_USER}/libnovel-ui:latest"]
   args = {
-    BUILD_VERSION = local.version
+    BUILD_VERSION = VERSION
     BUILD_COMMIT  = COMMIT
     BUILD_TIME    = BUILD_TIME
-    PREBUILT      = "1"
   }
 }
 
@@ -109,7 +91,11 @@ target "ui" {
 target "caddy" {
   inherits   = ["_defaults"]
   context    = "caddy"
-  tags       = img_tags("${DOCKER_USER}/libnovel-caddy")
+  tags       = [
+    "${DOCKER_USER}/libnovel-caddy:${VERSION}",
+    "${DOCKER_USER}/libnovel-caddy:${MAJOR_MINOR}",
+    "${DOCKER_USER}/libnovel-caddy:latest",
+  ]
   cache-from = ["type=registry,ref=${DOCKER_USER}/libnovel-caddy:latest"]
 }
 

ui/Dockerfile

@@ -21,11 +21,7 @@ ENV PUBLIC_BUILD_VERSION=$BUILD_VERSION
 ENV PUBLIC_BUILD_COMMIT=$BUILD_COMMIT
 ENV PUBLIC_BUILD_TIME=$BUILD_TIME
 
-# PREBUILT=1 skips npm run build — used in CI when the build/ directory has
-# already been compiled (and debug IDs injected) by a prior job.  The caller
-# must copy the pre-built build/ into the Docker context before building.
-ARG PREBUILT=0
-RUN [ "$PREBUILT" = "1" ] || npm run build
+RUN npm run build
 
 # ── Runtime image ──────────────────────────────────────────────────────────────
 # adapter-node bundles most server-side code, but packages with dynamic

ui/src/routes/catalogue/+page.server.ts

@@ -16,6 +16,7 @@ export const load: PageServerLoad = async ({ url, locals }) => {
 	const sort = url.searchParams.get('sort') ?? 'popular';
 	const status = url.searchParams.get('status') ?? 'all';
 	const q = url.searchParams.get('q') ?? '';
+	const audioOnly = url.searchParams.get('audio') === '1';
 
 	const params = new URLSearchParams({ page, genre, sort, status });
 	if (q.trim().length >= 2) {
@@ -64,7 +65,8 @@ export const load: PageServerLoad = async ({ url, locals }) => {
 		isAdmin: locals.user?.role === 'admin',
 		searchQuery: q.trim().length >= 2 ? q.trim() : '',
 		searchLocalCount: 0,
-		searchRemoteCount: 0
+		searchRemoteCount: 0,
+		audioOnly
 	};
 };
 

ui/src/routes/catalogue/+page.svelte

@@ -21,11 +21,13 @@
 	});
 
 	function applyFilters() {
+		filtersOpen = false;
 		const params = new URLSearchParams();
 		params.set('sort', filterSort);
 		params.set('genre', filterGenre);
 		params.set('status', filterStatus);
 		params.set('page', '1');
+		if (filterAudioOnly) params.set('audio', '1');
 		goto(`/catalogue?${params.toString()}`);
 	}
 
@@ -215,7 +217,7 @@
 
 	// ── Audio-available set ───────────────────────────────────────────────────
 	let audioSlugs = $state<Set<string>>(new Set());
-	let filterAudioOnly = $state(false);
+	let filterAudioOnly = $state(untrack(() => data.audioOnly));
 
 	$effect(() => {
 		fetch('/api/audio/slugs')
@@ -224,6 +226,17 @@
 			.catch(() => { /* non-critical */ });
 	});
 
+	function toggleAudio() {
+		filterAudioOnly = !filterAudioOnly;
+		const u = new URL(window.location.href);
+		if (filterAudioOnly) {
+			u.searchParams.set('audio', '1');
+		} else {
+			u.searchParams.delete('audio');
+		}
+		history.replaceState({}, '', u.toString());
+	}
+
 	const displayedNovels = $derived(
 		filterAudioOnly ? novels.filter((n) => audioSlugs.has(n.slug)) : novels
 	);
@@ -249,7 +262,7 @@
 				{m.catalogue_rank_no_data_body()}
 			{/if}
 		{:else}
-			{m.catalogue_browse_source()}
+			{m.catalogue_browse_source()}{#if data.total > 0}&nbsp;<span class="text-(--color-muted) text-xs">{data.total.toLocaleString()} novels</span>{/if}
 		{/if}
 	</p>
 </div>
@@ -349,7 +362,7 @@
 	<!-- Audio-only filter toggle -->
 	{#if audioSlugs.size > 0}
 		<button
-			onclick={() => (filterAudioOnly = !filterAudioOnly)}
+			onclick={toggleAudio}
 			title="Show only books with audio"
 			class="flex items-center gap-1.5 px-2.5 py-2 rounded border text-sm transition-colors shrink-0
 				{filterAudioOnly
@@ -503,7 +516,7 @@
 					{m.catalogue_rank_run_scrape_user()}
 				{/if}
 			{:else if filterAudioOnly}
-				<button onclick={() => (filterAudioOnly = false)} class="text-(--color-brand) hover:underline">Clear audio filter</button>
+				<button onclick={toggleAudio} class="text-(--color-brand) hover:underline">Clear audio filter</button>
 			{:else}
 				{m.catalogue_no_results_filters()}
 			{/if}
@@ -531,11 +544,8 @@
 							loading="lazy"
 						/>
 					{:else}
-						<div class="w-full h-full flex items-center justify-center text-(--color-muted)">
-							<svg class="w-12 h-12" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-								<path stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5"
-									d="M12 6.253v13m0-13C10.832 5.477 9.246 5 7.5 5S4.168 5.477 3 6.253v13C4.168 18.477 5.754 18 7.5 18s3.332.477 4.5 1.253m0-13C13.168 5.477 14.754 5 16.5 5c1.747 0 3.332.477 4.5 1.253v13C19.832 18.477 18.247 18 16.5 18c-1.746 0-3.332.477-4.5 1.253" />
-							</svg>
+						<div class="w-full h-full flex items-center justify-center bg-(--color-surface-3)">
+							<span class="text-5xl font-bold text-(--color-muted) select-none opacity-50">{novel.title.charAt(0).toUpperCase()}</span>
 						</div>
 					{/if}
 					{#if novel.rank}
@@ -622,11 +632,8 @@
 					{#if novel.cover}
 						<img src={novel.cover} alt={novel.title} class="w-full h-full object-cover" loading="lazy" />
 					{:else}
-						<div class="w-full h-full flex items-center justify-center text-(--color-muted)">
-							<svg class="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-								<path stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5"
-									d="M12 6.253v13m0-13C10.832 5.477 9.246 5 7.5 5S4.168 5.477 3 6.253v13C4.168 18.477 5.754 18 7.5 18s3.332.477 4.5 1.253m0-13C13.168 5.477 14.754 5 16.5 5c1.747 0 3.332.477 4.5 1.253v13C19.832 18.477 18.247 18 16.5 18c-1.746 0-3.332.477-4.5 1.253" />
-							</svg>
+						<div class="w-full h-full flex items-center justify-center bg-(--color-surface-3)">
+							<span class="text-xl font-bold text-(--color-muted) select-none opacity-50">{novel.title.charAt(0).toUpperCase()}</span>
 						</div>
 					{/if}
 					{#if isLoading}
@@ -688,6 +695,8 @@
 							<span class="text-xs text-emerald-400 font-medium">{m.catalogue_scrape_queued_badge()}</span>
 						{:else if scrapeResult[novel.slug] === 'busy'}
 							<span class="text-xs text-yellow-400 font-medium">{m.catalogue_scrape_busy_list()}</span>
+						{:else if scrapeResult[novel.slug] === 'forbidden'}
+							<span class="text-xs text-(--color-danger) font-medium">{m.catalogue_scrape_forbidden_badge()}</span>
 						{:else if scrapeResult[novel.slug] === 'error'}
 							<span class="text-xs text-(--color-danger) font-medium">{m.common_error()}</span>
 						{:else}