chore(release): v0.10.0 (#400)

Photo Essay mode, client proofing, studio-modern preset, admin panel overhaul, watermark, cookieless analytics, subpage toggle, SEO title templates. Analytics API now admin-only, Trivy scan on publish. Album order mirrors the Immich timeline; map theme, admin status panel, lightbox counter and Docker health check fixed.

See CHANGELOG.md for the full list and the health-check upgrade note.

app/api/admin/__tests__/admin-guards.test.ts

@@ -100,6 +100,27 @@ const ROUTES: {
       { params: Promise.resolve({ albumId: 'a1' }) },
     ],
   },
+  {
+    name: 'GET /api/admin/analytics',
+    path: 'analytics',
+    load: () => import('../analytics/route'),
+    method: 'GET',
+    args: () => [],
+  },
+  {
+    name: 'GET /api/admin/backups',
+    path: 'backups',
+    load: () => import('../backups/route'),
+    method: 'GET',
+    args: () => [],
+  },
+  {
+    name: 'POST /api/admin/backups',
+    path: 'backups',
+    load: () => import('../backups/route'),
+    method: 'POST',
+    args: () => [new Request('http://localhost/api/admin/backups', { method: 'POST', body: '{}' })],
+  },
 ];
 
 describe('admin route guards', () => {

app/api/admin/__tests__/status.test.ts

@@ -0,0 +1,67 @@
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+
+vi.mock('@/lib/admin/auth', () => ({
+  isAdminEnabled: () => true,
+  isAdminAuthenticated: async () => true,
+  COOKIE_NAME: 'folio_admin_session',
+}));
+
+vi.mock('@/lib/immich', () => ({
+  immich: { ping: vi.fn(async () => true) },
+}));
+
+vi.mock('@/lib/cache', () => ({
+  cache: { size: 0 },
+}));
+
+vi.mock('@/lib/admin/yaml-service', () => ({
+  readGalleryYaml: vi.fn(),
+  readSettingsYaml: vi.fn(),
+  listBackups: vi.fn(async () => []),
+}));
+
+import { GET } from '../status/route';
+import { readGalleryYaml, readSettingsYaml } from '@/lib/admin/yaml-service';
+
+const mockGallery = readGalleryYaml as unknown as ReturnType<typeof vi.fn>;
+const mockSettings = readSettingsYaml as unknown as ReturnType<typeof vi.fn>;
+
+async function status() {
+  return (await GET()).json();
+}
+
+describe('GET /api/admin/status — config integrity', () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    mockGallery.mockResolvedValue({ albums: ['a'] });
+    mockSettings.mockResolvedValue({ title: 'Site' });
+  });
+
+  it('reports a fully configured install as valid', async () => {
+    expect((await status()).config).toMatchObject({ status: 'valid', settings: 'valid' });
+  });
+
+  /**
+   * settings.yaml is optional — getConfig() falls back to defaults when it is
+   * absent. Reporting that install as "Degraded" sent people hunting for a
+   * fault that did not exist (#341).
+   */
+  it('treats a missing settings.yaml as valid, not as a fault', async () => {
+    mockSettings.mockResolvedValue(null); // what readSettingsYaml returns on ENOENT
+
+    expect((await status()).config).toMatchObject({ status: 'valid', settings: 'valid' });
+  });
+
+  it('still reports a settings.yaml that cannot be parsed', async () => {
+    mockSettings.mockRejectedValue(new Error('bad indentation'));
+
+    expect((await status()).config).toMatchObject({ status: 'invalid', settings: 'invalid' });
+  });
+
+  // gallery.yaml, unlike settings.yaml, is genuinely required.
+  it('reports a missing gallery.yaml as invalid', async () => {
+    mockGallery.mockResolvedValue(null);
+
+    expect((await status()).config).toMatchObject({ status: 'invalid', gallery: 'invalid' });
+  });
+});