Add preview LUT and bulk ZIP download

Introduce preview LUT support and a bulk "Download All" ZIP feature. Adds previewlut.cube and a Prisma migration to store per-project and global toggles (applyPreviewLut / defaultApplyPreviewLut), updates schema and API (projects/settings) and admin UI to expose the new option. Implements server endpoints to generate single-use download tokens and stream ZIP archives for all approved videos (Redis-backed tokens, rate-limiting, fingerprint binding, streaming with archiver), plus client UI buttons on the share page and in the asset download modal (includeVideo flag). Misc: rename proxylut.cube → previewlut.cube and copy it in the Docker image with adjusted permissions; improve docker-entrypoint chown to fix top-level file ownership; compact user menu in admin header; keep comment shortcuts visible when comments are disabled; fix playback status to show "Original Quality" when appropriate. Also bump package version to 0.9.11.

Author: MansiVisuals

CHANGELOG.md

@@ -7,6 +7,21 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+- Preview LUT support — a 3D LUT (`previewlut.cube`) is applied during transcoding for color-calibrated previews. Toggleable per-project and as a global default in settings. LUT crafted and provided for ViTransfer by colorist Fred ([@fredflx](https://github.com/fredflx) — [yechandocolor.com](https://yechandocolor.com)).
+- "Download All" button in the download modal — downloads the video and all assets together as a single ZIP file.
+- "Download All Videos" button on the share page grid view — downloads all approved videos as a single ZIP file.
+
+### Changed
+- Replaced the admin header email display and standalone sign out button with a compact icon-only user button with dropdown menu showing name, email, role, and sign out option.
+
+### Fixed
+- Toggling "Skip Transcoding" now correctly disables watermarks and preview LUT instead of leaving them enabled in the background.
+- Share page playback status now shows "Original Quality" when transcoding is skipped, instead of incorrectly displaying "Downscaled Preview with Watermark".
+- Uploading multiple videos or assets at once no longer fails with "Authentication failed". TUS uploads now automatically refresh expired tokens and retry.
+- Fixed Docker entrypoint not setting ownership of top-level app files (e.g. `package.json`) when remapping PUID/PGID, causing startup permission errors.
+- Keyboard shortcuts button in the comment panel no longer disappears after approving a video.
+
 ## [0.9.10] - 2026-03-28
 
 ### Security

Dockerfile

@@ -92,9 +92,10 @@ COPY --from=builder --link /app/tsconfig.json ./tsconfig.json
 COPY --from=builder --link /app/next.config.js ./next.config.js
 COPY --from=builder --link /app/worker.mjs ./worker.mjs
 COPY --link docker-entrypoint.sh /usr/local/bin/
-COPY --link proxylut.cube /usr/share/ffmpeg/proxylut.cube
+COPY --link previewlut.cube /usr/share/ffmpeg/previewlut.cube
 
 RUN chmod +x /usr/local/bin/docker-entrypoint.sh && \
+    chmod a+r /usr/share/ffmpeg/previewlut.cube && \
     chown -R app:app /app && \
     chmod -R a+rX /app/src /app/.next /app/node_modules /app/public /app/prisma
 

docker-entrypoint.sh

@@ -103,9 +103,10 @@ else
         echo "[OK] User permissions already correct"
     fi
 
-    # Fix ownership of writable runtime dirs and mounted volumes
-    chown app:app /app /app/.next /app/public /app/src 2>/dev/null || true
-    chown -R app:app /app/.next /app/public 2>/dev/null || true
+    # Fix ownership of top-level app files (package.json, config, etc.)
+    # Uses maxdepth 1 to avoid slow recursive chown of node_modules
+    find /app -maxdepth 1 -exec chown app:app {} + 2>/dev/null || true
+    chown -R app:app /app/.next /app/public /app/src /app/prisma 2>/dev/null || true
 
     # Ensure uploads volume is owned by app user (Docker mounts as root)
     if [ -d /app/uploads ]; then

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "vitransfer",
-  "version": "0.9.10",
+  "version": "0.9.11",
   "private": true,
   "scripts": {
     "dev": "next dev",

package.json

@@ -0,0 +1,4 @@
+-- Add preview LUT toggle to Project and Settings models
+
+ALTER TABLE "Project" ADD COLUMN "applyPreviewLut" BOOLEAN NOT NULL DEFAULT true;
+ALTER TABLE "Settings" ADD COLUMN "defaultApplyPreviewLut" BOOLEAN NOT NULL DEFAULT true;

proxylut.cube previewlut.cubeproxylut.cube renamed to previewlut.cube

@@ -68,6 +68,7 @@ model Project {
   watermarkPositions String  @default("center") // comma-separated: center, top-left, top-right, bottom-left, bottom-right
   watermarkOpacity   Int     @default(30) // Opacity percentage (10-100)
   watermarkFontSize  String  @default("medium") // small, medium, large
+  applyPreviewLut      Boolean @default(true) // Apply preview LUT during transcoding (for color-calibrated previews)
 
   // Client share page settings
   allowAssetDownload     Boolean @default(true) // Allow clients to download video assets when project is approved
@@ -316,6 +317,7 @@ model Settings {
   defaultWatermarkPositions String  @default("center") // comma-separated: center, top-left, top-right, bottom-left, bottom-right
   defaultWatermarkOpacity   Int     @default(30) // Opacity percentage (10-100)
   defaultWatermarkFontSize  String  @default("medium") // small, medium, large
+  defaultApplyPreviewLut      Boolean @default(true) // Apply preview LUT during transcoding by default
   maxUploadSizeGB          Int      @default(1) // Maximum upload size (GB) for TUS uploads (1-1000)
   maxCommentAttachments    Int      @default(10) // Maximum files per comment attachment batch (1-50)
 

prisma/migrations/20260331120000_add_proxy_lut_settings/migration.sql

@@ -47,6 +47,7 @@ interface Project {
   watermarkPositions: string
   watermarkOpacity: number
   watermarkFontSize: string
+  applyPreviewLut: boolean
   allowAssetDownload: boolean
   allowClientAssetUpload: boolean
   clientCanApprove: boolean
@@ -97,6 +98,7 @@ export default function ProjectSettingsPage() {
   const [watermarkPositions, setWatermarkPositions] = useState('center')
   const [watermarkOpacity, setWatermarkOpacity] = useState(30)
   const [watermarkFontSize, setWatermarkFontSize] = useState('medium')
+  const [applyPreviewLut, setApplyPreviewLut] = useState(true)
   const [allowAssetDownload, setAllowAssetDownload] = useState(true)
   const [allowClientAssetUpload, setAllowClientAssetUpload] = useState(false)
   const [clientCanApprove, setClientCanApprove] = useState(true)
@@ -134,6 +136,7 @@ export default function ProjectSettingsPage() {
     watermarkPositions: 'center',
     watermarkOpacity: 30,
     watermarkFontSize: 'medium',
+    applyPreviewLut: true,
   })
 
   // Reprocessing state
@@ -190,6 +193,7 @@ export default function ProjectSettingsPage() {
         setWatermarkPositions(data.watermarkPositions || 'center')
         setWatermarkOpacity(data.watermarkOpacity ?? 30)
         setWatermarkFontSize(data.watermarkFontSize || 'medium')
+        setApplyPreviewLut(data.applyPreviewLut ?? true)
         setAllowAssetDownload(data.allowAssetDownload ?? true)
         setAllowClientAssetUpload(data.allowClientAssetUpload ?? false)
         setClientCanApprove(data.clientCanApprove ?? true)
@@ -210,6 +214,7 @@ export default function ProjectSettingsPage() {
           watermarkPositions: data.watermarkPositions || 'center',
           watermarkOpacity: data.watermarkOpacity ?? 30,
           watermarkFontSize: data.watermarkFontSize || 'medium',
+          applyPreviewLut: data.applyPreviewLut ?? true,
         })
 
         // Check if slug was manually customized (different from auto-generated from title)
@@ -308,6 +313,7 @@ export default function ProjectSettingsPage() {
         watermarkPositions,
         watermarkOpacity,
         watermarkFontSize,
+        applyPreviewLut,
         allowAssetDownload,
         allowClientAssetUpload,
         clientCanApprove,
@@ -334,7 +340,8 @@ export default function ProjectSettingsPage() {
         currentWatermarkText !== originalSettings.watermarkText ||
         watermarkPositions !== originalSettings.watermarkPositions ||
         watermarkOpacity !== originalSettings.watermarkOpacity ||
-        watermarkFontSize !== originalSettings.watermarkFontSize
+        watermarkFontSize !== originalSettings.watermarkFontSize ||
+        applyPreviewLut !== originalSettings.applyPreviewLut
 
       // If processing settings changed, show modal
       if (processingSettingsChanged) {
@@ -385,6 +392,7 @@ export default function ProjectSettingsPage() {
         setWatermarkPositions(refreshedData.watermarkPositions || 'center')
         setWatermarkOpacity(refreshedData.watermarkOpacity ?? 30)
         setWatermarkFontSize(refreshedData.watermarkFontSize || 'medium')
+        setApplyPreviewLut(refreshedData.applyPreviewLut ?? true)
 
         // Update original settings
         setOriginalSettings({
@@ -396,6 +404,7 @@ export default function ProjectSettingsPage() {
           watermarkPositions: refreshedData.watermarkPositions || 'center',
           watermarkOpacity: refreshedData.watermarkOpacity ?? 30,
           watermarkFontSize: refreshedData.watermarkFontSize || 'medium',
+          applyPreviewLut: refreshedData.applyPreviewLut ?? true,
         })
       }
 
@@ -886,7 +895,13 @@ export default function ProjectSettingsPage() {
                     <Label htmlFor="skipTranscoding">{t('skipTranscoding')}</Label>
                     <p className="text-xs text-muted-foreground">{t('skipTranscodingHint')}</p>
                   </div>
-                  <Switch id="skipTranscoding" checked={skipTranscoding} onCheckedChange={setSkipTranscoding} />
+                  <Switch id="skipTranscoding" checked={skipTranscoding} onCheckedChange={(checked) => {
+                    setSkipTranscoding(checked)
+                    if (checked) {
+                      setWatermarkEnabled(false)
+                      setApplyPreviewLut(false)
+                    }
+                  }} />
                 </div>
                 {skipTranscoding && (
                   <p className="text-xs text-warning">{t('skipTranscodingWarning')}</p>
@@ -1031,6 +1046,18 @@ export default function ProjectSettingsPage() {
                   </>
                 )}
               </div>
+              )}
+
+              {!skipTranscoding && (
+              <div className="space-y-3 border p-4 rounded-lg bg-muted/30">
+                <div className="flex items-center justify-between">
+                  <div className="space-y-0.5">
+                    <Label htmlFor="applyPreviewLut">{t('applyPreviewLut')}</Label>
+                    <p className="text-xs text-muted-foreground">{t('applyPreviewLutHint')}</p>
+                  </div>
+                  <Switch id="applyPreviewLut" checked={applyPreviewLut} onCheckedChange={setApplyPreviewLut} />
+                </div>
+              </div>
               )}
 	          </CollapsibleSection>