feat: base64 photo upload to temp storage + fix phone validation

- Read file inputs as base64 via FileReader before JSON submit
- Server saves vetPhoto to public/uploads/, stores URL in Honor sheet
- Increased body-parser limit to 10mb for image payloads
- Added submitterPhone to validation identifier check

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

public/live-site-integration.js

@@ -65,11 +65,28 @@
                         formData[fieldName] = el.checked ? 'Yes' : 'No';
                     } else if (el.type === 'radio') {
                         if (el.checked) formData[fieldName] = value;
+                    } else if (el.type === 'file') {
+                        // handled below via FileReader
                     } else {
                         formData[fieldName] = value;
                     }
                 });
 
+                // Read file inputs as base64 DataURLs
+                const filePromises = [];
+                Array.from(form.elements).forEach(el => {
+                    if (el.type !== 'file' || !el.files || !el.files.length) return;
+                    const key = el.name || el.id;
+                    if (!key) return;
+                    filePromises.push(new Promise(resolve => {
+                        const reader = new FileReader();
+                        reader.onload = e => { formData[key] = e.target.result; resolve(); };
+                        reader.onerror = () => resolve();
+                        reader.readAsDataURL(el.files[0]);
+                    }));
+                });
+                await Promise.all(filePromises);
+
                 // Set fallbacks for strict checking on the backend if this was just a generic form
                 if (!formData.name && !formData.Name && !formData.contactName && !formData.vetFirstName && !formData.submitterName) {
                     formData._generic_name = "User";

server.js

@@ -5,6 +5,7 @@ const cors = require('cors');
 const bodyParser = require('body-parser');
 const { google } = require('googleapis');
 const fs = require('fs');
+const path = require('path');
 const { Server } = require("socket.io");
 const nodemailer = require('nodemailer');
 
@@ -21,8 +22,8 @@ const port = process.env.PORT || 3000;
 
 // Middleware
 app.use(cors());
-app.use(bodyParser.json());
-app.use(bodyParser.urlencoded({ extended: true }));
+app.use(bodyParser.json({ limit: '10mb' }));
+app.use(bodyParser.urlencoded({ extended: true, limit: '10mb' }));
 
 // Basic Auth for UI Protection
 app.use((req, res, next) => {
@@ -87,8 +88,8 @@ app.post('/api/submit', async (req, res) => {
     const { name, email, message, phone, subject, origin } = req.body;
 
     const hasIdentifier = name || email || phone ||
-      req.body.submitterEmail || req.body.submitterName || req.body.vetFirstName ||
-      req.body.contactName || req.body.groupName;
+      req.body.submitterEmail || req.body.submitterName || req.body.submitterPhone ||
+      req.body.vetFirstName || req.body.contactName || req.body.groupName;
     if (!hasIdentifier) {
       return res.status(400).json({ error: 'Please provide at least a name, email, or phone number.' });
     }
@@ -162,7 +163,24 @@ app.post('/api/submit', async (req, res) => {
         ];
       } else if (lowerOrigin.includes('honor')) {
         range = 'Honor';
-        // Map exactly to: Date, Vet First, Vet Middle, Vet Last, Rank, Branch, Years, Era, Hometown, Deceased, Story, Recognition, Submitter Name, Relationship, Email, Phone, Display Permission, Origin
+
+        let vetPhotoUrl = '';
+        const photoData = req.body.vetPhoto;
+        if (photoData && photoData.startsWith('data:image')) {
+          try {
+            const matches = photoData.match(/^data:image\/(\w+);base64,(.+)$/s);
+            if (matches) {
+              const uploadDir = path.join(__dirname, 'public', 'uploads');
+              if (!fs.existsSync(uploadDir)) fs.mkdirSync(uploadDir, { recursive: true });
+              const fileName = `${Date.now()}.${matches[1]}`;
+              fs.writeFileSync(path.join(uploadDir, fileName), Buffer.from(matches[2], 'base64'));
+              vetPhotoUrl = `${req.protocol}://${req.get('host')}/uploads/${fileName}`;
+            }
+          } catch (photoErr) {
+            console.error('Failed to save photo:', photoErr);
+          }
+        }
+
         rowData = [
           TIMESTAMP,
           req.body.vetFirstName || '',
@@ -176,6 +194,7 @@ app.post('/api/submit', async (req, res) => {
           req.body.isDeceased || 'No',
           req.body.vetStory || '',
           req.body.specialRecognition || '',
+          vetPhotoUrl,
           req.body.submitterName || '',
           req.body.relationship || '',
           req.body.submitterEmail || '',