fix: serve Swiper and Plotly from local vendor files instead of CDN

.gitignore

@@ -100,6 +100,7 @@ test_scripts/test_pick_from_image.py
 icloudpd
 scripts/*
 !scripts/build_vocab.py
+!scripts/download-vendor.py
 
 # Cache directories for mkdocs etc
 site

Makefile

@@ -20,6 +20,7 @@ help:
 	@echo "backend-lint     Run Python backend linting with Ruff."
 	@echo "frontend-lint    Run JavaScript frontend linting with ESLint and Prettier."
 	@echo "lint             Run both backend and frontend linting."
+	@echo "vendor           Download/copy vendor JS/CSS assets for offline use."
 
 # Run the unit tests
 test:
@@ -122,3 +123,10 @@ frontend-lint:
 # Run both backend and frontend linting
 .PHONY: lint
 lint: backend-lint frontend-lint
+
+# Download vendor JS/CSS assets into static/vendor/ for offline use.
+# Commit the generated files so they are bundled with the pip package.
+.PHONY: vendor
+vendor:
+	python scripts/download-vendor.py
+	@echo "Vendor assets ready in photomap/frontend/static/vendor/"

photomap/backend/photomap_server.py

@@ -111,6 +111,20 @@ async def dispatch(self, request: Request, call_next):
 # references pick up the cache-busting version segment automatically.
 templates.env.globals["static_url"] = lambda path: f"static/{asset_version}/{path}"
 
+_REQUIRED_VENDOR_FILES = [
+    "vendor/swiper-bundle.min.js",
+    "vendor/swiper-bundle.min.css",
+    "vendor/plotly.min.js",
+]
+_missing_vendor = [f for f in _REQUIRED_VENDOR_FILES if not (Path(static_path) / f).exists()]
+if _missing_vendor:
+    logger.error(
+        "Missing vendor files in static/vendor/: %s. "
+        "Run `python scripts/download-vendor.py` (or `make vendor`) from the repo root "
+        "to download them, then restart the server.",
+        ", ".join(_missing_vendor),
+    )
+
 
 # Main Routes
 @app.get("/", response_class=HTMLResponse, tags=["Main"])

photomap/frontend/templates/main.html

@@ -24,9 +24,9 @@
         }());
     </script>
 
-    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.css" />
-    <script src="https://cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js"></script>
-    <script src="https://cdn.plot.ly/plotly-3.0.1.min.js" charset="utf-8"></script>
+    <link rel="stylesheet" type="text/css" href="{{ static_url('vendor/swiper-bundle.min.css') }}" />
+    <script src="{{ static_url('vendor/swiper-bundle.min.js') }}"></script>
+    <script src="{{ static_url('vendor/plotly.min.js') }}" charset="utf-8"></script>
     <link rel="stylesheet" type="text/css" href="{{ static_url('css/base.css') }}" />
     <link rel="stylesheet" type="text/css" href="{{ static_url('css/animations.css') }}" />
     <link rel="stylesheet" type="text/css" href="{{ static_url('css/modal-base.css') }}" />

scripts/download-vendor.py

@@ -0,0 +1,45 @@
+#!/usr/bin/env python3
+"""Download vendor JS/CSS files for offline use.
+
+Run this script once to populate photomap/frontend/static/vendor/ with the
+bundled versions of Swiper and Plotly. After running, commit the generated
+files so the app works without an internet connection.
+
+Usage:
+    python scripts/download-vendor.py
+"""
+
+import urllib.request
+from pathlib import Path
+
+VENDOR_DIR = Path(__file__).parent.parent / "photomap" / "frontend" / "static" / "vendor"
+
+VENDOR_FILES = [
+    (
+        "https://cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.css",
+        "swiper-bundle.min.css",
+    ),
+    (
+        "https://cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js",
+        "swiper-bundle.min.js",
+    ),
+    (
+        "https://cdn.plot.ly/plotly-3.0.1.min.js",
+        "plotly.min.js",
+    ),
+]
+
+
+def main() -> None:
+    VENDOR_DIR.mkdir(parents=True, exist_ok=True)
+    for url, filename in VENDOR_FILES:
+        dest = VENDOR_DIR / filename
+        print(f"Downloading {filename} ...", end=" ", flush=True)
+        urllib.request.urlretrieve(url, dest)
+        size_kb = dest.stat().st_size / 1024
+        print(f"{size_kb:.1f} KB")
+    print("Done — vendor assets ready.")
+
+
+if __name__ == "__main__":
+    main()