74 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
dev_agentandClaude Opus 5.5	0c5772f48e	Withhold recipe source urls whose host the browser cannot parse ... safeSourceURL accepted hosts that Go's url.Parse takes but the browser's URL parser refuses, such as "https://[bad]/curry", so the detail API could send a source.url that sourceUrl() in web/src/dinners/detail.ts rejects, failing the whole recipe screen. The server now also requires a host the browser parses as it stands: a bracketed host must be an IPv6 address without a zone; any other must be ASCII letters, digits and hyphens in non-empty dot-separated labels, with no punycode label and, when its last label is a number, a valid dotted quad; and the host must be spelled out, not percent-encoded. Any other link is withheld as before. web/src/dinners/testdata/source_url_cases.json pins the source object the handler sends for each stored link. The Go server test checks the handler against it, and the recipe screen test renders each source from it, so the two parsers cannot drift apart on those links. Task: c1a97243-3e41-42fc-a1a0-1ac684ccb463 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-09 08:30:22 -04:00
dev_agentandClaude Opus 5.5	9a2de85f75	Return the recipe source url when it is verifiably free of secrets ... The dinner detail API now sends source.url when the stored recipe link is https to a host with no userinfo, no query (not even a bare "?") and no fragment (not even a bare "#"), and a port the client can parse; otherwise source.url is null. The rule matches sourceUrl() in web/src/dinners/detail.ts, so the recipe screen links "Recipe from {site}" in a new tab for a safe link and shows plain text otherwise. The site-name protection in pageSiteName is unchanged. Task: c1a97243-3e41-42fc-a1a0-1ac684ccb463 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-09 08:07:38 -04:00
orchestrator-agent	28e9c24fc7	Tablet kitchen reading mode (2a) (Feature 15) (#149) ... Co-authored-by: orchestrator-agent <20+orchestrator-agent@code.cubecraftcreations.com>	2026-10-09 07:42:48 -04:00
orchestrator-agent	c454c76816	Add to this week and favorite (Feature 15) (#147) ... Co-authored-by: orchestrator-agent <20+orchestrator-agent@code.cubecraftcreations.com>	2026-10-08 21:31:21 -04:00
orchestrator-agent	8068d06ff0	Mobile recipe detail (1k) (Feature 15) (#145) ... Co-authored-by: orchestrator-agent <20+orchestrator-agent@code.cubecraftcreations.com>	2026-10-08 20:36:47 -04:00
orchestrator-agent	d8ce8d8072	Dinner detail API (Feature 15) (#143) ... Co-authored-by: orchestrator-agent <20+orchestrator-agent@code.cubecraftcreations.com>	2026-10-08 19:46:31 -04:00
orchestrator-agent	cb451baed4	Feature 17: Shopping List and Supply Archive (#140) ... Co-authored-by: orchestrator-agent <20+orchestrator-agent@code.cubecraftcreations.com>	2026-10-08 15:16:51 -04:00
orchestrator-agent	7003ff92ec	Feature 16: Google Calendar Sync (#130) ... Co-authored-by: orchestrator-agent <20+orchestrator-agent@code.cubecraftcreations.com>	2026-10-08 03:13:21 -04:00
orchestrator-agent	5ac5982c1f	Release corrections round 4: verified pre-deploy backup step and honest rotation-check documentation (#124) ... Co-authored-by: orchestrator-agent <20+orchestrator-agent@code.cubecraftcreations.com>	2026-10-07 20:02:53 -04:00
orchestrator-agent	1862f450db	Feature 14: Weekly Plan Builder (#121) ... Co-authored-by: orchestrator-agent <20+orchestrator-agent@code.cubecraftcreations.com>	2026-10-07 16:53:23 -04:00
orchestrator-agent	5291457214	Feature 13: Discover - Side Quest Suggestions (#110) ... Co-authored-by: orchestrator-agent <20+orchestrator-agent@code.cubecraftcreations.com>	2026-10-07 05:53:22 -04:00
orchestrator-agent	ac7453f576	Release corrections round 3: redact candidate-lookup failures in logs (#104) ... Co-authored-by: orchestrator-agent <20+orchestrator-agent@code.cubecraftcreations.com>	2026-10-07 00:40:53 -04:00
orchestrator-agent	4a209623f5	Release corrections round 2: offline onboarding lockout and stale candidates after rename (#103) ... Co-authored-by: orchestrator-agent <20+orchestrator-agent@code.cubecraftcreations.com>	2026-10-07 00:14:32 -04:00
orchestrator-agent	cb920714b0	Release corrections: candidate URL exposure, onboarding notification honesty, pasted link cleanup (#101) ... Co-authored-by: orchestrator-agent <20+orchestrator-agent@code.cubecraftcreations.com>	2026-10-06 23:12:26 -04:00
orchestrator-agent	a3648397ee	Fix docker build: move dedupe cases fixture into web (#99) ... Co-authored-by: orchestrator-agent <20+orchestrator-agent@code.cubecraftcreations.com>	2026-10-06 21:51:48 -04:00
dev_agent	2b0e5ff01a	Feature 12: Regular dinners and onboarding (#94) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-06 21:28:23 -04:00
dev_agent	0c89eef577	Deflake TestFetchCanceledWaitHoldsNoSlot (#88) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-06 13:18:26 -04:00
dev_agent	fcbdebd6e8	Feature 11: Settings home and Admin AI assistant (#86) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-06 12:45:05 -04:00
dev_agent	f25b28b39b	Feature 10: Recipe grounding and photos (#78) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-06 07:27:58 -04:00
dev_agent	67e44a506a	Feature 07: Deployment, identity and backups (#75) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-05 20:59:47 -04:00
dev_agent	81c5085f9a	Feature 06: PWA shell and offline (#58) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-05 15:22:37 -04:00
dev_agent	e6fd24db0a	Return context error when a retry backoff wait is cancelled (#64) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-05 11:41:23 -04:00
dev_agent	72fa311de9	Feature 09: AI harness and skills framework (#62) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-05 11:18:53 -04:00
approver_agent	8adbd2d7c2	Merge pull request 'Feature 08: LLM provider layer' (#49) from feature/5dd6e253-cc9b-41f3-9091-bb834f7a373a-llm-provider-layer into dev	2026-10-04 16:13:44 -04:00
dev_agent	b347e1c911	Retry, backoff and default Generate timeout (#48) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-04 11:02:55 -04:00
dev_agent	e105cdb9c5	Add xAI Grok as a provider (#46) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-04 09:36:10 -04:00
approver_agent	d80012a821	Merge pull request 'Feature 05: Frontend foundation and design system' (#43) from feature/64e5bb19-c9a2-4c6a-8f0c-aceae43fb732-frontend-foundation into dev	2026-10-04 09:18:57 -04:00
dev_agent	9ace3aba9f	Provider presets and factory (#44) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-04 09:18:34 -04:00
dev_agent	5758f198e4	Keep the CSRF token on same-origin API calls and lint colours in the build (#45) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-04 09:08:42 -04:00
dev_agent	32ab0c0b6d	Ollama native adapter (#41) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-04 08:47:05 -04:00
dev_agent	048d5dd71a	API client, auth bootstrap and job polling (#42) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-04 08:46:40 -04:00
dev_agent	15886f2c55	Anthropic Messages adapter (#40) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-04 08:09:20 -04:00
dev_agent	acd29c8221	Feature 08 task 2: OpenAI-compatible adapter (#35) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-04 07:41:45 -04:00
dev_agent	c899f07b1f	Nav pill slide animation (#39) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 18:52:57 -04:00
dev_agent	998658b42c	Responsive app shell, routes and navigation (#38) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 18:40:34 -04:00
dev_agent	a453a84231	Photo and Icon components (#37) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 18:29:16 -04:00
dev_agent	732aa92a8c	Sheet, ErrorBanner, Skeleton and EmptyState (#36) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 18:22:59 -04:00
dev_agent	02f1dd6491	Feature 05 task 2: Core UI primitives (#34) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 16:34:59 -04:00
dev_agent	496f2e5375	Feature 05 task 1: Design tokens and self-hosted fonts (#32) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 16:16:25 -04:00
dev_agent	72042516e2	Feature 08 task 1: Provider interface, typed errors and Fake provider (#33) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 16:14:12 -04:00
approver_agent	7cc96121e4	Merge pull request 'Feature 04: Platform Services - Secrets, Settings, Time and Jobs' (#30) from feature/49e2f2e2-c9c1-4c1b-8d66-753ceeadbf75-platform-services into dev	2026-10-03 15:50:01 -04:00
dev_agent	bba9033ac5	Feature 04 integration fix: authenticated job enqueue API and progressive HTTP flow (#31) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 15:46:19 -04:00
dev_agent	e050736178	Feature 04 task 5: Async job runner and GET /api/v1/jobs/{id} (#29) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 15:24:01 -04:00
dev_agent	3ba78d47bc	Feature 04 task 4: Default seeding for AI settings and notification preferences (#28) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 14:58:30 -04:00
dev_agent	8be5c56f6f	Feature 04 task 3 (rebased): Household settings seeding and API (#27) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 11:50:15 -04:00
dev_agentandClaude Opus 5.5	ea4047a852	Merge origin/dev (Feature 03) into Feature 04 integration ... Feature 03 made the OIDC variables required, so the Feature 04 boot tests' loadConfig helper now sets them alongside the secret key file. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-03 11:38:18 -04:00
approver_agent	41ff2ab114	Merge pull request 'Feature 03: Authentik OIDC Sessions' (#24) from feature/9c4eba48-9a49-4b73-a85f-a4bc19eb4062-authentik-oidc-sessions into dev	2026-10-03 11:36:30 -04:00
dev_agent	df692ef214	Feature 03 integration fix: sanitize ID-token verification errors (#26) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 11:32:36 -04:00
dev_agent	88f7d0a5fa	Feature 03 integration fix: sanitize discovery errors and narrow CSRF exemption (#25) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 11:22:53 -04:00
dev_agent	5833a73541	Feature 03 task 5: Trusted proxy handling for forwarded headers (#23) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 11:05:33 -04:00