jpdevhub · jpdevhub · May 27, 2026 · May 27, 2026 · May 27, 2026 · May 27, 2026
diff --git a/.env.example b/.env.example
@@ -11,3 +11,9 @@ VITE_API_URL=
 # Dev mode — shows the "Dev Login" button that bypasses Google OAuth.
 # Set to "true" locally. NEVER set in Vercel env vars.
 VITE_DEV_MODE=true
+
+# ── PostHog Analytics ─────────────────────────────────────────────────────────
+# Leave blank locally — PostHog is silently disabled when this key is missing.
+# Set both vars in your Vercel / production environment dashboard.
+VITE_POSTHOG_KEY=
+VITE_POSTHOG_HOST=https://us.i.posthog.com
diff --git a/.github/ISSUE_TEMPLATE/bug_report.yml b/.github/ISSUE_TEMPLATE/bug_report.yml
@@ -12,50 +12,10 @@ body:
         ---
 
         Before submitting, search open issues to avoid duplicates.
-        Vague reports without reproduction steps will be closed.
-
   - type: textarea
     id: description
     attributes:
       label: Description
       description: A clear description of the bug.
     validations:
       required: true
-
-  - type: textarea
-    id: steps
-    attributes:
-      label: Steps to Reproduce
-      description: Exact steps to reproduce the behavior.
-      placeholder: |
-        1. Go to '...'
-        2. Click on '...'
-        3. See error
-    validations:
-      required: true
-
-  - type: textarea
-    id: expected
-    attributes:
-      label: Expected Behavior
-      description: What you expected to happen.
-    validations:
-      required: true
-
-  - type: textarea
-    id: environment
-    attributes:
-      label: Environment
-      placeholder: |
-        OS: macOS 14 / Windows 11 / Ubuntu 22.04
-        Browser: Chrome 124 / Firefox 125
-        Node.js: 20.x
-        Python: 3.12.x
-    validations:
-      required: true
-
-  - type: textarea
-    id: additional
-    attributes:
-      label: Additional Context
-      description: Screenshots, error logs, or any other relevant information.
diff --git a/.github/ISSUE_TEMPLATE/feature_request.yml b/.github/ISSUE_TEMPLATE/feature_request.yml
@@ -12,29 +12,9 @@ body:
         - A PR opened for a feature without a linked, approved issue will be closed.
         - Check the [Roadmap in DOCUMENTATION.md](https://github.com/jpdevhub/FreshScanAi/blob/main/DOCUMENTATION.md#14-future-roadmap) first — if your idea is already planned, comment on the existing tracking issue instead.
   - type: textarea
-    id: problem
+    id: description
     attributes:
-      label: Problem
-      description: What problem does this feature solve?
+      label: Description
+      description: What problem does this feature solve and what is your proposed solution?
     validations:
       required: true
-
-  - type: textarea
-    id: solution
-    attributes:
-      label: Proposed Solution
-      description: Describe the feature you want to see implemented.
-    validations:
-      required: true
-
-  - type: textarea
-    id: alternatives
-    attributes:
-      label: Alternatives Considered
-      description: Any alternative approaches you have considered.
-
-  - type: textarea
-    id: additional
-    attributes:
-      label: Additional Context
-      description: Mockups, references, or any other relevant context.
diff --git a/.github/ISSUE_TEMPLATE/good_first_issue.yml b/.github/ISSUE_TEMPLATE/good_first_issue.yml
@@ -6,36 +6,10 @@ body:
     attributes:
       value: |
         This issue is intended for contributors new to the project. It should be self-contained and completable without deep knowledge of the codebase.
-
   - type: textarea
     id: description
     attributes:
       label: Task Description
       description: A clear description of what needs to be done.
     validations:
       required: true
-
-  - type: textarea
-    id: context
-    attributes:
-      label: Context and Background
-      description: Any background information or links to relevant code the contributor needs to get started.
-    validations:
-      required: true
-
-  - type: textarea
-    id: acceptance
-    attributes:
-      label: Acceptance Criteria
-      description: Define what done looks like for this task.
-      placeholder: |
-        - [ ] Criterion 1
-        - [ ] Criterion 2
-    validations:
-      required: true
-
-  - type: textarea
-    id: hints
-    attributes:
-      label: Hints
-      description: Relevant files, functions, or documentation to look at first.
diff --git a/.github/workflows/pr-size-labeler.yml b/.github/workflows/pr-size-labeler.yml
@@ -0,0 +1,23 @@
+name: PR Size Labeler
+on:
+  pull_request_target:
+    types: [opened, synchronize, reopened]
+
+jobs:
+  size-label:
+    runs-on: ubuntu-latest
+    permissions:
+      issues: write
+      pull-requests: write
+    steps:
+      - name: Add PR Size Label
+        uses: pascalgn/size-label-action@v0.5.5
+        env:
+          GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
+        with:
+          sizes: >
+            {
+              "0": "level: easy",
+              "100": "level: medium",
+              "500": "level: hard"
+            }
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
@@ -126,7 +126,7 @@ Do not open a PR if any of these are failing locally. Fix them first.
 ### Manual requirements (checked during review)
 
 - [ ] Branch is up to date with `main` — rebase, do not merge
-- [ ] No `.env` files, credentials, secrets, or API keys are present anywhere in the diff
+- [ ] No `.env` or `.env.local` files, credentials, secrets, or API keys are present anywhere in the diff
 - [ ] No model weight files (`.pth`, `.pt`, `.onnx`, `.bin`) are committed
 - [ ] No `__pycache__/` directories, `.pyc` files, or macOS `._*` metadata files are committed
 - [ ] New endpoints include corresponding tests in `backend/tests/` or `backend/test_*.py`
@@ -192,7 +192,7 @@ PRs will be closed without review if they:
 
 - Are submitted without a prior issue or maintainer approval for non-trivial changes
 - Fail any automated CI gate
-- Contain `.env` files, secrets, model weights, or binary artifacts
+- Contain `.env` or `.env.local` files, secrets, model weights, or binary artifacts
 - Touch the deployment configuration (`vercel.json`, `Dockerfile`, `startup.sh`) without approval
 - Introduce a new dependency (npm or PyPI) without prior discussion
 - Rewrite existing, working logic without a documented reason

diff --git a/DOCUMENTATION.md b/DOCUMENTATION.md
@@ -862,9 +862,9 @@ npm run dev
 
 | Mode | Endpoint | Models Required | Use Case |
 |------|---------|----------------|----------|
-| Demo | `/api/v1/scan-auto` | ❌ No | Demo presentations, CI |
-| Auto (real) | `/api/v1/scan-auto` | ✅ Yes | Single-image mobile scan |
-| Full scan | `/api/v1/scan` | ✅ Yes | Multi-region expert mode |
+| Demo | `/api/v1/scan-auto` | No | Demo presentations, CI |
+| Auto (real) | `/api/v1/scan-auto` | Yes | Single-image mobile scan |
+| Full scan | `/api/v1/scan` | Yes | Multi-region expert mode |
 
 ### Production Deployment
 - Frontend: Vercel / Netlify (static export)

diff --git a/README.md b/README.md
@@ -116,7 +116,7 @@ DEV_BYPASS_AUTH=true   # never set true in production
 
 | Script | Description |
 |---|---|
-| `npm run setup` | Install dependencies, write `.env`, optionally start local Supabase |
+| `npm run setup` | Install dependencies, write `.env.local` (frontend) & `.env` (backend), optionally start local Supabase |
 | `npm run dev` | Start frontend and backend concurrently |
 | `npm run build` | Production build (TypeScript + Vite) |
 | `npm run lint` | Run ESLint across the codebase |