# lovelope.app 💌

*lovelope: a little mashup of* love *and* envelope.

The adorable way to ask someone out. Pick a theme, add some date ideas and a GIF, share one link, and they pick a time and answer.

No accounts, no friction, just a sweet little link. Everything personal is encrypted right in the browser before it ever leaves your device (see [Encryption](#encryption) below).

> Made with care through conversational, AI-assisted development rather than hand-written line by line, so there's no professional security audit behind it. The encryption itself is real and does exactly what this doc says, but treat this as a fun personal project, not battle-tested production software.

## Quick start

You need [Docker](https://www.docker.com/) installed. That's it — no clone required, the image is published on GHCR.

Create a `docker-compose.yml`:

```yaml
services:
  app:
    image: ghcr.io/jeangaston/lovelope:latest
    ports:
      - "3000:3000"
    environment:
      DATABASE_URL: "file:/app/data/lovelope.db"
      APP_URL: "http://localhost:3000"
      GIPHY_API_KEY: "${GIPHY_API_KEY:-}"
    volumes:
      - ./data:/app/data
    restart: unless-stopped
```

Then:

```bash
docker compose up -d
```

Open **http://localhost:3000**. Your data lives in `./data/lovelope.db` on your machine.

Want GIF search to work? Grab a free key at [developers.giphy.com](https://developers.giphy.com/), export it as `GIPHY_API_KEY` before running `docker compose up` (or drop it in a `.env` file next to `docker-compose.yml`), then restart. Without it, the app still runs fine, GIF search is just disabled.

Pin a specific version instead of always tracking `latest` by using a release tag, e.g. `ghcr.io/jeangaston/lovelope:v1.0.0`.

### Build from source

If you'd rather build the image yourself instead of pulling from GHCR:

```bash
git clone https://github.com/jeangaston/lovelope.git && cd lovelope
cp .env.example .env
docker compose up --build
```

This uses the [docker-compose.yml](docker-compose.yml) in the repo, which builds from the local [Dockerfile](Dockerfile) instead of pulling a published image.

## Features

- **3-step proposal builder:** your name, their name, date ideas with real time slots, a custom gradient theme, an optional GIF
- **Animated reveal:** "{sender} has a message for you" before the proposal shows
- **"Impossible No" mode:** the No button runs away from the cursor 🎪
- **Two private links:** one to share, one to manage, no login required
- **QR code**, generated locally in the browser
- **Add to calendar:** Google Calendar link + `.ics` download once they say yes
- **Auto-delete:** proposals purge after 30 days

## Encryption

Every personal detail (both names, the title and message, the date ideas, the recipient's answer and note) is encrypted in the browser (AES-GCM) before it's sent anywhere. The server and its database only ever store unreadable ciphertext.

The decryption key is generated in the browser and lives only in the link itself, after the `#`. Links look like:

```
http://localhost:3000/p/AbC123xy#k=<key>
```

Browsers never send the part after `#` to any server, so that key never reaches the backend. This has real consequences, on purpose:

- **Lose the link, lose the proposal.** There's no password reset for this: nobody, including you running the server, can recover it.
- **Link previews stay generic.** Pasting the link into iMessage/WhatsApp/Slack shows a plain "You have a message 💌" card, not the real title, since the server can't read it to build a preview.
- A few non-personal fields stay in plain text because the server needs them to work at all: the theme/colors you picked, the proposal's status, timestamps, and which activity/time got picked (just an ID, not what it says).

## Environment variables

| Variable | Required | Description |
|---|---|---|
| `DATABASE_URL` | ✅ | SQLite file path, default `file:/app/data/lovelope.db` works out of the box with Docker |
| `APP_URL` | ✅ | Base URL used to build share links, e.g. `http://localhost:3000` |
| `GIPHY_API_KEY` | optional | Enables GIF search. Free key at [developers.giphy.com](https://developers.giphy.com/), leave blank to disable |

## Local development (no Docker)

```bash
npm install
cp .env.example .env
# edit .env: DATABASE_URL="file:./prisma/dev.db"

npx prisma migrate dev
npm run dev
```

Useful scripts:

```bash
npm run db:migrate:dev   # create a new Prisma migration
npm run db:studio        # open Prisma Studio (DB GUI)
npm run db:seed          # seed a demo proposal
```

## Architecture

```
src/
├── app/
│   ├── create/              # Proposal creation (guest, no auth)
│   ├── manage/[token]/      # Creator management page
│   ├── p/[slug]/            # Public proposal page (recipient)
│   └── api/
│       ├── proposals/guest/ # POST: create & publish
│       ├── manage/[token]/  # GET / DELETE: manage by token
│       ├── manage/[token]/publish/  # POST: publish draft
│       ├── p/[slug]/        # GET proposal + POST response
│       └── gif/search/      # Giphy proxy
├── components/
│   ├── ProposalForm.tsx     # 3-step creation form
│   └── Footer.tsx
├── lib/
│   ├── db.ts                # Prisma singleton + 30-day auto-purge
│   ├── crypto-client.ts     # AES-GCM encrypt/decrypt (Web Crypto, browser-only)
│   ├── proposal-schema.ts   # Zod validation (ciphertext blobs, size-bounded only)
│   ├── proposal-create.ts   # Prisma create helper
│   ├── rate-limit.ts        # Token-bucket (5 req/min per IP)
│   └── themes.ts            # 6 built-in themes + custom gradient
└── public/
    ├── manifest.webmanifest # PWA manifest
    └── icon.svg             # App icon
```

## Security

- **End-to-end encryption:** see [Encryption](#encryption) above.
- Response endpoint rate-limited (5 req/min per IP, in-memory)
- Slugs are 10-char nanoid, unguessable
- Management tokens are 20-char nanoid, unguessable, no auth required
- `DELETE /api/manage/:token` hard-deletes the proposal + response (GDPR erasure)
- Proposals auto-delete after 30 days (background interval in `db.ts`)

---

Made with ❤️ by [jeangaston](https://github.com/jeangaston/lovelope)