65 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
dev_agentandClaude Opus 5.5	471daec594	Refuse expired candidate offers at lookup time ... Store each offer set's deadline and check it under offersMu in candidateURL, so an expired candidate id cannot ground a dinner while its eviction timer is delayed. The timer still evicts the set from memory. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-06 22:58:43 -04:00
dev_agentandClaude Opus 5.5	bef3f3fd5c	Evict expired candidate offers on a timer ... Each dinner's offered candidates now carry a time.AfterFunc expiry that drops them from the service once offerLifetime passes, so token-bearing candidate URLs are no longer held until some later search sweeps them. Storing new offers or clearing a dinner's offers stops the old timer; the timer drops only the set it was armed for. The expiry runs no goroutine until it fires and touches only the in-memory map. TestCandidatesExpire now waits for the eviction with no further search and checks the candidate no longer grounds; TestExpiredCandidatesNotHeld checks no dinner's expired offers remain held. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-06 22:50:47 -04:00
dev_agentandClaude Opus 5.5	515919088a	Retire the v2 API cache, bound candidate offers, deflake link leak tests ... - Bump the service worker API cache to v3 so activation deletes the v2 cache, whose recipe-candidate responses used the full page URL as candidate_id; test that activation deletes v1 and v2 and keeps v3. - Give candidate offers a 30-minute lifetime, drop expired offers when new ones are stored, and clear a dinner's offers on every hand grounding (candidate, link or manual) and on archive. A candidate search still running when its dinner is cleared stores nothing, so a stale candidate_id gets the same 400 as an unknown one. - Make the link leak assertions in TestDinnerResponsesHideTokenInLinkPath and TestCreateRegularNeverNamesFromLink check phrases a ULID cannot contain, so a dinner id holding "KEY" no longer fails them. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-06 22:35:30 -04:00
dev_agentandClaude Opus 5.5	db6f39cdb9	Restore embed placeholder and reflow architecture notes ... make build overwrote the tracked internal/frontend/dist/index.html placeholder in the previous commit; put it back as it is on dev. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-06 22:17:01 -04:00
dev_agentandClaude Opus 5.5	e9e9087b48	Hide candidate URLs, report unavailable notifications, clear grounded links ... Release corrections from the review of promotion pull request #98: - MQ-98-01: recipe-candidates returns an opaque candidate_id (an HMAC of the dinner and page under a per-process key) that the server resolves to the page it last offered that dinner. Candidate URLs, which may carry a token, no longer reach responses or the service-worker cache. - MQ-98-02: "Turn on notifications" no longer finishes onboarding silently when notifications are unavailable (or denied); the step says plainly that nothing was turned on and offers "Finish setting up". The placeholder stays until Feature 19 wires Web Push. - MQ-98-03: GroundPendingDinner clears the pasted recipe_url when background grounding succeeds, as manual grounding already did. Maestro task 6819ce33-3715-4bd4-9208-a54a8b5cee02. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-06 22:16:44 -04:00
orchestrator-agent	a3648397ee	Fix docker build: move dedupe cases fixture into web (#99) ... Co-authored-by: orchestrator-agent <20+orchestrator-agent@code.cubecraftcreations.com>	2026-10-06 21:51:48 -04:00
dev_agent	2b0e5ff01a	Feature 12: Regular dinners and onboarding (#94) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-06 21:28:23 -04:00
dev_agent	0c89eef577	Deflake TestFetchCanceledWaitHoldsNoSlot (#88) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-06 13:18:26 -04:00
dev_agent	fcbdebd6e8	Feature 11: Settings home and Admin AI assistant (#86) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-06 12:45:05 -04:00
dev_agent	f25b28b39b	Feature 10: Recipe grounding and photos (#78) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-06 07:27:58 -04:00
dev_agent	67e44a506a	Feature 07: Deployment, identity and backups (#75) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-05 20:59:47 -04:00
dev_agent	81c5085f9a	Feature 06: PWA shell and offline (#58) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-05 15:22:37 -04:00
dev_agent	e6fd24db0a	Return context error when a retry backoff wait is cancelled (#64) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-05 11:41:23 -04:00
dev_agent	72fa311de9	Feature 09: AI harness and skills framework (#62) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-05 11:18:53 -04:00
approver_agent	8adbd2d7c2	Merge pull request 'Feature 08: LLM provider layer' (#49) from feature/5dd6e253-cc9b-41f3-9091-bb834f7a373a-llm-provider-layer into dev	2026-10-04 16:13:44 -04:00
dev_agent	b347e1c911	Retry, backoff and default Generate timeout (#48) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-04 11:02:55 -04:00
dev_agent	e105cdb9c5	Add xAI Grok as a provider (#46) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-04 09:36:10 -04:00
approver_agent	d80012a821	Merge pull request 'Feature 05: Frontend foundation and design system' (#43) from feature/64e5bb19-c9a2-4c6a-8f0c-aceae43fb732-frontend-foundation into dev	2026-10-04 09:18:57 -04:00
dev_agent	9ace3aba9f	Provider presets and factory (#44) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-04 09:18:34 -04:00
dev_agent	5758f198e4	Keep the CSRF token on same-origin API calls and lint colours in the build (#45) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-04 09:08:42 -04:00
dev_agent	32ab0c0b6d	Ollama native adapter (#41) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-04 08:47:05 -04:00
dev_agent	048d5dd71a	API client, auth bootstrap and job polling (#42) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-04 08:46:40 -04:00
dev_agent	15886f2c55	Anthropic Messages adapter (#40) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-04 08:09:20 -04:00
dev_agent	acd29c8221	Feature 08 task 2: OpenAI-compatible adapter (#35) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-04 07:41:45 -04:00
dev_agent	c899f07b1f	Nav pill slide animation (#39) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 18:52:57 -04:00
dev_agent	998658b42c	Responsive app shell, routes and navigation (#38) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 18:40:34 -04:00
dev_agent	a453a84231	Photo and Icon components (#37) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 18:29:16 -04:00
dev_agent	732aa92a8c	Sheet, ErrorBanner, Skeleton and EmptyState (#36) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 18:22:59 -04:00
dev_agent	02f1dd6491	Feature 05 task 2: Core UI primitives (#34) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 16:34:59 -04:00
dev_agent	496f2e5375	Feature 05 task 1: Design tokens and self-hosted fonts (#32) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 16:16:25 -04:00
dev_agent	72042516e2	Feature 08 task 1: Provider interface, typed errors and Fake provider (#33) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 16:14:12 -04:00
approver_agent	7cc96121e4	Merge pull request 'Feature 04: Platform Services - Secrets, Settings, Time and Jobs' (#30) from feature/49e2f2e2-c9c1-4c1b-8d66-753ceeadbf75-platform-services into dev	2026-10-03 15:50:01 -04:00
dev_agent	bba9033ac5	Feature 04 integration fix: authenticated job enqueue API and progressive HTTP flow (#31) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 15:46:19 -04:00
dev_agent	e050736178	Feature 04 task 5: Async job runner and GET /api/v1/jobs/{id} (#29) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 15:24:01 -04:00
dev_agent	3ba78d47bc	Feature 04 task 4: Default seeding for AI settings and notification preferences (#28) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 14:58:30 -04:00
dev_agent	8be5c56f6f	Feature 04 task 3 (rebased): Household settings seeding and API (#27) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 11:50:15 -04:00
dev_agentandClaude Opus 5.5	ea4047a852	Merge origin/dev (Feature 03) into Feature 04 integration ... Feature 03 made the OIDC variables required, so the Feature 04 boot tests' loadConfig helper now sets them alongside the secret key file. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-03 11:38:18 -04:00
approver_agent	41ff2ab114	Merge pull request 'Feature 03: Authentik OIDC Sessions' (#24) from feature/9c4eba48-9a49-4b73-a85f-a4bc19eb4062-authentik-oidc-sessions into dev	2026-10-03 11:36:30 -04:00
dev_agent	df692ef214	Feature 03 integration fix: sanitize ID-token verification errors (#26) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 11:32:36 -04:00
dev_agent	88f7d0a5fa	Feature 03 integration fix: sanitize discovery errors and narrow CSRF exemption (#25) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 11:22:53 -04:00
dev_agent	5833a73541	Feature 03 task 5: Trusted proxy handling for forwarded headers (#23) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 11:05:33 -04:00
dev_agent	36b975ff5b	Feature 03 task 4: CSRF protection and GET /api/v1/me (#22) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 10:51:26 -04:00
dev_agent	b2201c5da1	Feature 03 task 3: Household group gate and auth middleware (#21) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 10:30:07 -04:00
dev_agent	f0bdd0ef40	Feature 03 task 2: Server-side sessions, cookie and logout (#19) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 10:20:14 -04:00
dev_agent	5e78465d34	Feature 04 task 2: Household week and local-time utilities (#18) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 09:58:06 -04:00
dev_agent	99c8f1625f	Feature 03 task 1: OIDC login and callback against Authentik (#16) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 09:58:05 -04:00
dev_agent	6d5c14f778	Feature 04 task 1: secretbox: AES-256-GCM secrets at rest (#17) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 09:46:29 -04:00
approver_agent	19ea8d52d8	Merge pull request 'Feature 02: SQLite Data Layer and Schema' (#14) from feature/b9c21d67-bf72-411a-901d-77e57352d398-sqlite-data-layer-and-schema into dev	2026-10-03 09:30:47 -04:00
dev_agent	c1a868c48b	Feature 02 integration fix: repository coverage and boot-path tests (#15) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 09:27:22 -04:00
dev_agent	17a69f4de7	Feature 02 task 4: sqlc configuration and core queries (#13) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 09:15:40 -04:00