fix: v1.4.4 — MetaLens mobile overflow, CSP images, footer logo centering

- MetaLens: contained long unbreakable text and grid-item sizing that
  forced horizontal page scroll on mobile
- CSP: img-src widened to https: so social-preview images can load,
  consistent with the existing http(s)-only gate
- service worker: scoped to same-origin fetches, no longer blocks
  cross-origin resources via connect-src
- footer logo: recentered the R symbol, previously ~32px off-axis from
  the wordmark
- copy: "Fullstack" capitalization unified to lowercase site-wide

Author: Randy-R-code

CHANGELOG.md

@@ -9,6 +9,35 @@ InfraLens's history as a standalone product (2026-01-06 to 2026-08-10) is
 frozen in [`docs/infralens/CHANGELOG.md`](docs/infralens/CHANGELOG.md).
 InfraLens changes since its native migration are recorded here.
 
+## [1.4.4] — 2026-08-16
+
+### Fixed
+
+- **MetaLens mobile overflow** — long, unbreakable text (a raw malformed
+  canonical URL surfaced in a finding, plus default grid-item sizing on the
+  Search and Social preview cards) could force the whole page to scroll
+  horizontally on mobile instead of staying contained within the result
+  cards.
+- **Social preview images blocked by CSP** — `img-src` only allowed
+  `'self'` and `data:`, so no analyzed page's Open Graph image could ever
+  load; widened to `https:`, consistent with the http(s)-only gate already
+  enforced before an image URL is rendered.
+- **Service worker blocked cross-origin fetches** — `public/sw.js`
+  intercepted every GET request regardless of origin and re-issued it via
+  `fetch()`, which is subject to `connect-src 'self'`; now scoped to
+  same-origin requests only, so cross-origin resources bypass the service
+  worker and follow normal browser/CSP rules.
+- **Footer logo** — the R symbol's bounding-box center sat measurably
+  (~32px on the 1000px source) right of the "RANDY CODE" wordmark's, an
+  artifact of the letter's diagonal leg; recentered so both align on the
+  same axis.
+
+### Changed
+
+- **"Fullstack" capitalization unified to lowercase** across metadata,
+  Open Graph images and structured data, matching the About page and
+  footer.
+
 ## [1.4.3] — 2026-08-16
 
 ### Fixed

app/about/page.tsx

@@ -104,7 +104,7 @@ const domains = [
       "Le développement web est venu compléter ce parcours de façon naturelle. Construire des outils utiles, comprendre les besoins réels, livrer quelque chose de fiable — c'est exactement ce que j'ai cherché à faire dans chaque poste avant ça.",
     points: [
       "Formation autodidacte structurée depuis 2025",
-      "Applications full-stack TypeScript / Next.js",
+      "Applications fullstack TypeScript / Next.js",
       "Projets SaaS de A à Z en autonomie complète",
       "Veille technique et amélioration continue",
     ],

app/layout.tsx

@@ -36,11 +36,11 @@ export const metadata: Metadata = {
     statusBarStyle: "black-translucent",
     title: "Randy Code",
   },
-  title: "Randy Rimbault — Développeur Fullstack TypeScript",
+  title: "Randy Rimbault — Développeur fullstack TypeScript",
   description:
     "Développeur fullstack TypeScript. Sites vitrines, applications SaaS, apps mobiles, SEO local — des produits pensés pour être utiles et durables.",
   openGraph: {
-    title: "Randy Rimbault — Développeur Fullstack TypeScript",
+    title: "Randy Rimbault — Développeur fullstack TypeScript",
     description:
       "Développeur fullstack TypeScript. Sites vitrines, applications SaaS, apps mobiles, SEO local — des produits pensés pour être utiles et durables.",
     url: "/",
@@ -50,7 +50,7 @@ export const metadata: Metadata = {
   },
   twitter: {
     card: "summary_large_image",
-    title: "Randy Rimbault — Développeur Fullstack TypeScript",
+    title: "Randy Rimbault — Développeur fullstack TypeScript",
     description:
       "Développeur fullstack TypeScript. Sites vitrines, applications SaaS, apps mobiles, SEO local.",
   },

app/manifest.ts

@@ -2,7 +2,7 @@ import type { MetadataRoute } from "next";
 
 export default function manifest(): MetadataRoute.Manifest {
   return {
-    name: "Randy Code — Développeur Fullstack TypeScript",
+    name: "Randy Code — Développeur fullstack TypeScript",
     short_name: "Randy Code",
     description:
       "Portfolio interactif de Randy Rimbault, développeur fullstack TypeScript.",

app/opengraph-image.tsx

@@ -2,7 +2,7 @@ import { ImageResponse } from "next/og";
 import { readFile } from "node:fs/promises";
 import { join } from "node:path";
 
-export const alt = "Randy Code — Développeur Fullstack TypeScript";
+export const alt = "Randy Code — Développeur fullstack TypeScript";
 export const size = { width: 1200, height: 630 };
 export const contentType = "image/png";
 
@@ -142,7 +142,7 @@ export default async function Image() {
             marginBottom: 16,
           }}
         >
-          Développeur Fullstack TypeScript
+          Développeur fullstack TypeScript
         </div>
 
         {/* Tagline */}

app/tools/metalens/opengraph-image.tsx

@@ -65,7 +65,7 @@ const preview = (
           marginTop: 4,
         }}
       >
-        Randy Rimbault — Développeur Fullstack TypeScript
+        Randy Rimbault — Développeur fullstack TypeScript
       </span>
       <span
         style={{

app/tools/metalens/page.tsx

@@ -43,7 +43,7 @@ export const viewport: Viewport = {
 export default function MetaLensPage() {
   return (
     <ToolPageShell>
-      <main className="flex min-h-screen flex-col bg-background px-6 pb-16 text-foreground">
+      <main className="flex min-h-screen flex-col overflow-x-hidden bg-background px-6 pb-16 text-foreground">
         <div className="mx-auto w-full max-w-5xl">
           <ToolHeader
             icon={ScanSearch}

next.config.mjs

@@ -79,7 +79,10 @@ const nextConfig = {
             // would drop CDN caching/SSG sitewide) or the experimental SRI
             // feature, which doesn't cover React/Next's own inline
             // hydration scripts. Not worth the tradeoff here.
-            value: `default-src 'self'; ${scriptSrc}; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self'; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'`,
+            // img-src allows https: on top of 'self' — MetaLens renders
+            // social-preview images from arbitrary analyzed pages, already
+            // gated to http(s) by isSafeExternalUrl() before reaching <img>.
+            value: `default-src 'self'; ${scriptSrc}; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self'; connect-src 'self'; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'`,
           },
         ],
       },

package.json

@@ -1,6 +1,6 @@
 {
   "name": "randy-code",
-  "version": "1.4.3",
+  "version": "1.4.4",
   "private": true,
   "packageManager": "pnpm@10.7.0",
   "scripts": {