add photos, an immich-backed library behind its own sidecar

officer-photos owns the whole Immich contract: the instance URL and the API
key live there and nowhere else, and the platform side is an auth-gated
forwarder holding no credentials. The route surface is an allow-list keyed on
the first path segment, so admin, auth, api-keys, sessions, jobs, system-config
and libraries are unreachable by construction rather than by enumeration.

The UI mirrors Immich's own sidebar — timeline, explore, map, search, albums,
people, favorites, sharing, archive, trash — because the point of a sidecar
screen is to reproduce what the upstream already ships, then extend it. The
timeline reads Immich's columnar time-bucket format directly; selection lives
in the URL per docs/navigation-audit.md.

Two things worth knowing for anyone touching this later:

- `duration` is an integer count of milliseconds in Immich 3.0. It was an
  HH:MM:SS.mmm string before, and every stale example still shows that form.
- the map container is sized with h-full/w-full, never `absolute inset-0`.
  maplibre's stylesheet sets `position: relative; overflow: hidden` on the
  element it is given, and an unlayered vendor rule beats Tailwind 4's layered
  `.absolute` regardless of source order — so the div collapses to height 0 and
  clips its own canvas away. Nothing errors: the GL context is healthy, tiles
  download and pixels are drawn into a buffer nobody ever composites.

maplibre-gl is pinned to 5.x deliberately; 6.0 resolves a separate worker file
from import.meta.url, which Officer's index.html fallback answers with HTML.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

src/apps/officer-web/Screens/Dashboard/Layout/Dock.tsx

@@ -138,6 +138,7 @@ import {
   ArrowDownUp,
   Bitcoin,
   Receipt,
+  Images,
 } from 'lucide-react';
 
 export const ALL_DOCK_ITEMS: DockItem[] = [
@@ -146,6 +147,7 @@ export const ALL_DOCK_ITEMS: DockItem[] = [
   { label: 'Email', to: '/email', icon: Mail, color: '#ef4444' },
   { label: 'Chat', to: '/chat', icon: MessageCircle, color: '#60a5fa' },
   { label: 'Music', to: '/music', icon: Music, color: '#22c55e' },
+  { label: 'Photos', to: '/photos', icon: Images, color: '#10b981' },
   { label: 'Soulseek', to: '/soulseek', image: '/slskd.png', color: '#ffffff' },
   { label: 'Headscale', to: '/headscale', icon: Network, color: '#818cf8' },
   { label: 'Transmission', to: '/transmission', icon: ArrowDownUp, color: '#e11d48' },

src/apps/officer-web/Screens/Dashboard/Photos/PhotosScreen.tsx

@@ -0,0 +1,56 @@
+import { useEffect, useMemo } from 'react';
+import { Navigate, useParams } from 'react-router';
+import type { LayoutNode } from 'officerdev';
+import { WorkspaceView, DEFAULT_PHOTOS_SECTION, photosSectionPath, isPhotosSection } from 'officerdev';
+import { useDashboardState } from 'state/useDashboardState';
+import { defaultLayout } from './defaultLayout';
+
+// /photos uses the Workspace/Panel system: the section nav (photos-nav) on the left, the section view
+// (photos-view) on the right. Both talk to the officer-photos sidecar through the /api/photos auth proxy; the
+// Immich URL and API key live in the sidecar's environment and the browser never sees either.
+//
+// The open section is :section in the URL; deeper selection (which asset, album, person, search) is in the
+// query string. Nothing about "what is open" lives in a panel channel.
+
+const ALLOWED_APP_TYPES = new Set<string | null>(['photos-nav', 'photos-view', null]);
+
+function normalizeLayout(node: LayoutNode): LayoutNode {
+  if (node.type === 'panel') {
+    return ALLOWED_APP_TYPES.has(node.appType) ? node : { ...node, appType: 'photos-view' };
+  }
+  const children = node.children.map((c) => {
+    const fixed = normalizeLayout(c.node);
+    return fixed === c.node ? c : { ...c, node: fixed };
+  });
+  const changed = children.some((c, i) => c !== node.children[i]);
+  return changed ? { ...node, children } : node;
+}
+
+export const PhotosScreen = () => {
+  const { section } = useParams();
+  const rawWorkspace = useDashboardState<LayoutNode>('screens/photos', defaultLayout);
+
+  const workspace = useMemo(() => {
+    const fixed = normalizeLayout(rawWorkspace.value);
+    if (fixed === rawWorkspace.value) return rawWorkspace;
+    return { ...rawWorkspace, value: fixed };
+  }, [rawWorkspace]);
+
+  useEffect(() => {
+    if (rawWorkspace.isLoaded && workspace.value !== rawWorkspace.value) {
+      rawWorkspace.setValue(workspace.value);
+    }
+  }, [rawWorkspace.isLoaded, workspace.value, rawWorkspace.value]);
+
+  // Bare /photos, or a section that doesn't exist, canonicalises rather than rendering a default behind a URL
+  // that names something else — the nav highlight comes from the router, so a bogus URL highlights nothing.
+  if (!isPhotosSection(section)) {
+    return <Navigate to={photosSectionPath(DEFAULT_PHOTOS_SECTION)} replace />;
+  }
+
+  return (
+    <div className="h-full w-full pt-2">
+      <WorkspaceView workspace={workspace} locked />
+    </div>
+  );
+};

src/apps/officer-web/Screens/Dashboard/Photos/defaultLayout.ts

@@ -0,0 +1,11 @@
+import type { LayoutNode } from 'officerdev';
+
+export const defaultLayout: LayoutNode = {
+  type: 'group',
+  id: 'photos-root',
+  direction: 'horizontal',
+  children: [
+    { node: { type: 'panel', id: 'photos-nav', appType: 'photos-nav' }, size: 18 },
+    { node: { type: 'panel', id: 'photos-view', appType: 'photos-view' }, size: 82 },
+  ],
+};

src/apps/officer-web/Screens/Dashboard/Photos/index.tsx

@@ -0,0 +1 @@
+export * from './PhotosScreen';

src/apps/officer-web/Screens/Dashboard/index.tsx

@@ -13,6 +13,7 @@ export * from './Files';
 export * from './Music';
 export * from './Soulseek';
 export * from './Headscale';
+export * from './Photos';
 export * from './Transmission';
 export * from './Invoices';
 export * from './Wallet';