# ONEDASH.ONLINE — Comprehensive System & Architecture Specification ## 1. Executive Summary & Brand Identity ONEDASH.ONLINE is an integrated creative operating system developed to replace disconnected SaaS tools for commercial photography studios, film production companies, creative agencies, and editorial designers. The application embodies an architectural studio aesthetic characterized by deep charcoal tones (#121214, #161618), hairline borders (#2D2D32), high-contrast typography (Bodoni Moda, Cormorant Garamond, DM Sans, Plus Jakarta Sans, JetBrains Mono), and structured page layouts. --- ## 2. Functional Modules & Capabilities ### Module 1: CREATE (Production & Studio Operations) - **Project Workspaces**: Hierarchical project management supporting custom milestones, Gantt scheduling, task assignment, phase tracking, and budget caps. - **Digital Call Sheets**: Dynamic production call sheets integrating real-time solar ephemeris calculations (sunrise, sunset, golden hour, blue hour, solar noon) based on shoot coordinates, integrated live weather forecasts, crew call times, location maps, hospital/emergency protocols, and PDF export. - **Equipment Locker**: Asset tracking for cameras, lenses, lighting, and grip gear with maintenance logs, depreciation tracking, serial number registers, and equipment check-out / check-in audit logs. - **Studio Calendar**: Multi-view temporal engine with timezone synchronization, crew availability matrix, shoot bookings, deadline alerts, and two-way Google Calendar synchronization. - **Studio Notes & Asset Vault**: Markdown-powered creative scratchpads with image attachments, reference moodboards, and linked client briefs. ### Module 2: MANAGE (Client CRM, Contracts & Billing) - **Client CRM**: Comprehensive directory for agency clients, art directors, producers, and talent with interaction history, lifetime value (LTV) calculation, and direct messaging channels. - **Branded Proposals & Quotes**: Visual proposal builder with itemized pricing, scope of work breakdowns, optional deliverables, expiration timers, and interactive client accept/decline workflows. - **E-Contracts & Digital Signatures**: Legally binding signature collection adhering to ESIGN Act and eIDAS compliance standards. Includes timestamped audit trails, client IP capture, signature drawing/typing, and automated countersignature triggers. - **Invoicing & Milestone Billing**: Structured financial ledger supporting deposit/balance payment splits, retainer drawdown schedules, multi-currency invoicing (USD, EUR, GBP, AUD, CAD), automated late fee calculations, and recurring billing. - **Stripe Merchant Integration**: Direct Stripe Connect integration for instant credit card, ACH, and Apple Pay payment processing with automated status webhooks. - **Private Client Portals**: Secure, branded client access hubs for reviewing contracts, approving proofs, downloading high-resolution assets, and settling invoices. ### Module 3: SHOWCASE (Publishing, Galleries & Websites) - **Client Proofing Galleries**: High-speed image proofing system with Lightroom EXIF metadata extraction, star ratings (1-5), color label filters, client feedback notes, pin-point annotations, and download permission controls. - **Portfolio Website Builder**: Editorial website creator with custom domains, responsive typography controls, customizable grid layouts, SEO metadata controls, and instant CDN publishing. - **Journal & Content Management**: Editorial publishing suite for studio behind-the-scenes articles, case studies, and technical writeups with Markdown support and schema-enriched markup. ### Module 4: GROW (Intelligence, Marketing & SEO) - **Studio Intelligence AI**: An analytical business advisor powered by Google Gemini 3.8 Flash that inspects workspace metrics (invoices, debtor aging, equipment utilization, shoot density) and provides strategic recommendations without modifying source data. - **Conversion & Pipeline Analytics**: Interactive charts (D3 / Recharts) tracking lead acquisition sources, quote-to-close conversion ratios, average revenue per shoot, and year-over-year growth. - **Social Media Publishing Queue**: Content scheduling calendar for Instagram, LinkedIn, and Pinterest with image previews, hashtag banks, and optimal posting time suggestions. - **Review & Testimonial Collector**: Automated post-project survey engine for gathering client testimonials with one-click approval for portfolio showcase display. - **SEO & Discoverability Engine**: Automated generation and management of XML sitemaps, robots directives, OpenGraph 1200x630 cards, JSON-LD Schema.org rich snippets, and `llms.txt` integration. --- ## 3. Technology Architecture & Security ### Frontend Stack - Framework: React 18 with TypeScript - Build Tool: Vite - Styling: Tailwind CSS (with bespoke architectural editorial tokens) - Animations: Framer Motion - Icons: Lucide React (standardized monochrome stroke icons) - Visualization: D3.js and Recharts ### Backend & Cloud Stack - Server: Express (Node.js) with strict TypeScript compilation - Database: Google Cloud Firestore (multi-tenant isolated document database) - Authentication: Firebase Authentication (Multi-Factor, OAuth, Role-Based Session Tokens) - Storage: Google Cloud Storage for high-resolution photography and legal PDFs - AI Engine: Google Gemini 3.8 Flash with server-side SDK execution and zero client exposure ### Security & Privacy Controls - **Anti-Prompt Injection Engine**: Strict server-side prompt sanitization (`sanitizeForAI`), delimiter bounding (`<<>>`), and system instruction hardening (`ANTI_INJECTION_DIRECTIVE`). - **XSS & Output Sanitization**: Full multi-stage filtering (`sanitizeAIOutput`) on all AI-generated content before rendering. - **Role-Based Access Control (RBAC)**: Workspace isolation ensuring Member accounts cannot access unreleased financial ledgers, private keys, or API tokens. - **GDPR & Privacy Compliance**: Full right-to-be-forgotten endpoints, data export tools, no third-party tracking cookies on core operational routes, and explicit disallow directives on private workspaces for web crawlers. --- ## 4. Subscription Plans & Tiers - **FREE (Starter)**: 1 Workspace, up to 3 Active Projects, 5 Client Profiles, 50 AI credits/month, 5GB Cloud Storage. - **STUDIO**: 1 Workspace, 25 Active Projects, 50 Client Profiles, 500 AI credits/month, 100GB Cloud Storage, Custom Domain Websites, Digital Call Sheets, E-Signatures. - **PROFESSIONAL**: 3 Workspaces, Unlimited Projects, Unlimited Clients, 2,500 AI credits/month, 1TB Cloud Storage, Multi-Currency Invoicing, Stripe Merchant Integration. - **AGENCY**: 10 Workspaces, Unlimited Team Members, 10,000 AI credits/month, 5TB Cloud Storage, Studio Intelligence Analyst, Custom Contract Clause Builder, Priority 24/7 SLA. - **ENTERPRISE**: Dedicated VPC, Custom Cloud Storage Buckets, Unlimited AI Quotas, SSO / SAML Integration, Bespoke API Rate Limits, Dedicated Account Manager. --- ## 5. Architectural Comparison vs Competitors (HoneyBook, Studio Ninja, Pixieset, Dubsado) - **vs HoneyBook**: HoneyBook targets solo wedding/event freelancers with basic proposal templates, but lacks production call sheets, solar ephemeris, camera gear registers, and Lightroom EXIF lightboxes. - **vs Studio Ninja**: Studio Ninja provides lightweight portrait shoot scheduling, but has a dated UI, lacks built-in proofing galleries (requiring 3rd-party subscriptions), and lacks commercial agency retainer architecture. - **vs Pixieset / Pic-Time**: Pixieset specializes in client photo delivery and print labs, but lacks complete pre-production (call sheets, crew manifests, gear lockers), commercial agency proposals, and milestone billing. - **vs Dubsado**: Dubsado offers intricate form logic branching with steep learning curves, but lacks visual creative tools (no proofing lightboxes, no call sheets, no portfolio site builder). - **vs The Fragmented Stack**: ONEDASH replaces paying £150-£280+/month across 6 separate tools (Asana, HoneyBook, Pixieset, DocuSign, Squarespace, Dropbox) with a single, connected creative operating system. - **Comparison Page**: https://onedash.online/vs --- ## 6. Contact & Support - **Website**: https://onedash.online - **Administrative Contact**: admin@onedash.online - **System Documentation**: https://onedash.online/resources - **Security Inquiries**: https://onedash.online/security