chore(fe): vite dev proxy for local FastAPI (dev-only, not in Docker build)

Standalone compose (project slab-greenfield) on ports 10884/10885 with
dedicated slab_greenfield_* volumes; live M3/M4 stacks (10881/10882/10883)
untouched. All smoke checks pass; Woo draft pending live creds (P5 exit).

deploy/INVENTORY.md

@@ -115,5 +115,29 @@ Do not put a host name in the product spec.
 - Live verification (loopback, real API): Continue to Review → `review-screen` visible,
   heading "Review to Ready", no loadError, no pageerror. POST /slabs 201, photos 201×2,
   GET slab/taxonomy/settings 200, review 200.
-- In-repo mock e2e (m3-create + photo-strip) 6/6 green against the same bundle hash before deploy.
+ - In-repo mock e2e (m3-create + photo-strip) 6/6 green against the same bundle hash before deploy.
-- Not done: commit/push of the import restore; Woo publish path not re-exercised this round.
+ - Not done: commit/push of the import restore; Woo publish path not re-exercised this round.
+
+### 2026-09-25 14:00 PDT — greenfield rebuild M1–M3 live (isolated project)
+
+- Source: branch `rewrite/greenfield-app` @ `49c22c9` "feat(greenfield): rebuild SlabUploader
+  M1-M3 on clean foundation, all gates green" (pushed to Gitea; pulled into `~/slab-deploy`).
+  `matches HEAD`: **yes** (deploy tree clean at `49c22c9`).
+- Isolated deploy: **standalone** `deploy/greenfield-standalone.yml` +
+  `COMPOSE_PROJECT_NAME=slab-greenfield` (host-local, untracked). No base-file merge (avoids the
+  compose ports-merge collision on 10881/10882). Dedicated volumes `slab_greenfield_db` /
+  `slab_greenfield_images` — the live `deploy_slab_db` / `deploy_slab_images` (10881/10882)
+  are **untouched**.
+- URLs: `http://192.168.1.202:10884` (LAN FE) · `http://100.64.0.9:10884` (Tailscale) ·
+  `http://192.168.1.202:10885` (LAN API) · loopback 127.0.0.1:18084 / 18085.
+- `SLAB_ENV=dev` (mock-safe slice runs without live Woo creds at startup); real Woo creds are
+  entered in-app (Settings) for the P5 UAT walk. `WOO_BASE_URL` from `.env` (https, store).
+- Smoke checks (§5) all pass: FE-served + direct `/api/health` →
+  `{"status":"ok","version":"0.6.0-gf-p3a","woo_reachable":false}`; fastapi log clean
+  (`schema ready (idempotent)`, `Application startup complete`, no refusal); FE serves
+  `<title>SlabUploader — Capture</title>`; `GET /settings` masked (SETTINGS-75);
+  `GET /admin/taxonomy` 200 (empty cache); 404 envelope `{"error":{...}}`.
+- Existing stacks verified intact post-deploy: `deploy-frontend-1` (10881), `deploy-fastapi-1`
+  (10882), `slabuploader-m4-review` (10883), `slabuploader-m1` (18080).
+- Not done: the live `SLAB-UAT-*` Woo draft (P5 exit) — needs Woo app password entered in
+  Settings + `test-woo` + the human UAT walk (QUALITY-105/30).

frontend/vite.config.ts

@@ -5,4 +5,11 @@ import sveltePreprocess from 'svelte-preprocess';
 export default defineConfig({
   plugins: [svelte({ preprocess: sveltePreprocess() })],
   worker: { format: 'es' },
+  server: {
+    port: 5173,
+    proxy: {
+      // Local dev: route API calls to the FastAPI backend (mock-safe).
+      '/api': { target: 'http://127.0.0.1:18081', changeOrigin: true }
+    }
+  }
 });