5 Commits

Include renames

Author	SHA1	Message	Date
dev_agentandClaude Opus 5.5	70f545152a	Validate decoded photo size and require a photos row to serve ... decodePhoto checked the GIF logical screen size, but gif.Decode returns the first frame, which may be smaller; a 400x400 screen with a 1x1 first frame passed and was scaled. The short-side check now measures the decoded image's bounds. The pixel cap still comes from the header, before decoding. OpenPhoto served any file whose name was a canonical ULID and stored size, with no photos row required. It now looks the id up with the new GetPhoto query and reports an id with no row as fs.ErrNotExist, so GET /media/photos/{id}-{size}.jpg is 404 for it even when a file exists. OpenPhoto takes the request context for the lookup. The media test fixture records a photos row for its served photo and adds an orphan photo whose files exist without a row; both its sizes must be 404. Maestro task: 8a432108-d3ba-4013-ae8c-11963981d641 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-05 14:10:54 -04:00
dev_agentandClaude Opus 5.5	0347e11b7d	Add photo cache and /media/photos endpoint ... recipes.PhotoCache.CachePhoto downloads an image through the safe Fetcher's new FetchImage (JPEG/PNG/WebP/GIF content types only, 8 MB cap, uncached), decodes it (GIF first frame), refuses images under 300 px on the short side, scales to 1200 px and 400 px on the long side with golang.org/x/image/draw, encodes JPEG quality 82 under $MEALQUEST_DATA_DIR/media/photos/{id}-{size}.jpg, deduplicates by the SHA-256 of the original bytes and records a photos row. GET /media/photos/{id}-{400|1200}.jpg serves a stored size behind the session with Cache-Control "private, max-age=31536000, immutable"; anything unknown is 404. Adds golang.org/x/image v0.45.0 (approved; v0.46.0 needs Go 1.26). Maestro task: 8a432108-d3ba-4013-ae8c-11963981d641 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-05 13:59:02 -04:00
dev_agent	2fb7807af3	Search providers: SearXNG and Brave with ranking (#67) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-05 13:41:48 -04:00
dev_agent	ec5b586c16	schema.org Recipe JSON-LD extractor (#66) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-05 13:13:03 -04:00
dev_agent	24eee8bc61	SSRF-safe recipe fetcher (#65) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-05 12:38:58 -04:00