35 Commits

Include renames

Author	SHA1	Message	Date
dev_agentandClaude Opus 5.5	799e7b62d0	Redact the AI key from model lists and fit the longest prompt ... GET /settings/ai/models now removes the stored API key from every model ID and display name the provider returns, so a provider that echoes the key in a successful list cannot disclose it. PATCH /settings/ai gets its own body limit, sized for 8,000 characters at 12 bytes of JSON each (a \u-escaped surrogate pair) plus the other fields. A valid prompt of three- or four-byte characters was refused by the shared 16 KiB limit; the 8,000-character rule stays the only limit on the prompt. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-06 09:04:16 -04:00
dev_agentandClaude Opus 5.5	94632e0950	Keep the stored AI key on the endpoint it was stored for ... PATCH /settings/ai refused nothing when the base URL or provider changed with a key stored, so a session could point base_url at another server and have POST /settings/ai/verify send it the key. Both changes are now refused while a key is stored: remove the key, change the endpoint, then store the new key. A preset without a fixed base URL takes a key only when its base URL passes secureurl.Check, so the key never crosses the network in plain text. Maestro task: 176b2a30-6e90-4339-b430-5b8967b2fd32 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-06 08:52:01 -04:00
dev_agentandClaude Opus 5.5	60a92ec78f	Add AI settings API with key management ... GET/PATCH /api/v1/settings/ai return and change provider, base_url, model, temperature and system_prompt, with read-only api_key_last4 and key_verified_at. PATCH requires a preset provider, temperature 0-1 in 0.1 steps and a system_prompt of at most 8000 characters. PUT /settings/ai/api-key seals the key with secretbox and records its last four characters; POST /settings/ai/verify calls Provider.Verify and records key_verified_at or returns the provider's typed error; GET /settings/ai/models lists the live models; POST /settings/ai/reset-prompt restores household.DefaultPersonaPrompt. The new internal/ai/aisettings service also builds the harness.Config for each skill run from the saved settings. presets.ForAccount builds a provider's ListModels and Verify without a model, so a key can be checked and a model picked before one is chosen. Tests scan every response body from these routes for the full key, and a harness run with the Fake provider uses the PATCHed model and temperature. Maestro task: 176b2a30-6e90-4339-b430-5b8967b2fd32 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-06 08:50:12 -04:00
dev_agent	f25b28b39b	Feature 10: Recipe grounding and photos (#78) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-06 07:27:58 -04:00
dev_agent	81c5085f9a	Feature 06: PWA shell and offline (#58) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-05 15:22:37 -04:00
dev_agent	e6fd24db0a	Return context error when a retry backoff wait is cancelled (#64) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-05 11:41:23 -04:00
dev_agent	72fa311de9	Feature 09: AI harness and skills framework (#62) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-05 11:18:53 -04:00
dev_agent	b347e1c911	Retry, backoff and default Generate timeout (#48) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-04 11:02:55 -04:00
dev_agent	e105cdb9c5	Add xAI Grok as a provider (#46) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-04 09:36:10 -04:00
dev_agent	9ace3aba9f	Provider presets and factory (#44) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-04 09:18:34 -04:00
dev_agent	32ab0c0b6d	Ollama native adapter (#41) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-04 08:47:05 -04:00
dev_agent	15886f2c55	Anthropic Messages adapter (#40) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-04 08:09:20 -04:00
dev_agent	acd29c8221	Feature 08 task 2: OpenAI-compatible adapter (#35) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-04 07:41:45 -04:00
dev_agent	72042516e2	Feature 08 task 1: Provider interface, typed errors and Fake provider (#33) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 16:14:12 -04:00
dev_agent	bba9033ac5	Feature 04 integration fix: authenticated job enqueue API and progressive HTTP flow (#31) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 15:46:19 -04:00
dev_agent	e050736178	Feature 04 task 5: Async job runner and GET /api/v1/jobs/{id} (#29) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 15:24:01 -04:00
dev_agent	3ba78d47bc	Feature 04 task 4: Default seeding for AI settings and notification preferences (#28) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 14:58:30 -04:00
dev_agent	8be5c56f6f	Feature 04 task 3 (rebased): Household settings seeding and API (#27) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 11:50:15 -04:00
dev_agentandClaude Opus 5.5	ea4047a852	Merge origin/dev (Feature 03) into Feature 04 integration ... Feature 03 made the OIDC variables required, so the Feature 04 boot tests' loadConfig helper now sets them alongside the secret key file. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-03 11:38:18 -04:00
dev_agent	df692ef214	Feature 03 integration fix: sanitize ID-token verification errors (#26) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 11:32:36 -04:00
dev_agent	88f7d0a5fa	Feature 03 integration fix: sanitize discovery errors and narrow CSRF exemption (#25) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 11:22:53 -04:00
dev_agent	5833a73541	Feature 03 task 5: Trusted proxy handling for forwarded headers (#23) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 11:05:33 -04:00
dev_agent	36b975ff5b	Feature 03 task 4: CSRF protection and GET /api/v1/me (#22) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 10:51:26 -04:00
dev_agent	b2201c5da1	Feature 03 task 3: Household group gate and auth middleware (#21) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 10:30:07 -04:00
dev_agent	f0bdd0ef40	Feature 03 task 2: Server-side sessions, cookie and logout (#19) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 10:20:14 -04:00
dev_agent	5e78465d34	Feature 04 task 2: Household week and local-time utilities (#18) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 09:58:06 -04:00
dev_agent	99c8f1625f	Feature 03 task 1: OIDC login and callback against Authentik (#16) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 09:58:05 -04:00
dev_agent	6d5c14f778	Feature 04 task 1: secretbox: AES-256-GCM secrets at rest (#17) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 09:46:29 -04:00
dev_agent	c1a868c48b	Feature 02 integration fix: repository coverage and boot-path tests (#15) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 09:27:22 -04:00
dev_agent	17a69f4de7	Feature 02 task 4: sqlc configuration and core queries (#13) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 09:15:40 -04:00
dev_agent	fa7c6b7218	Feature 02 task 3: Initial v1 schema migration (#12) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 09:06:21 -04:00
dev_agent	b06d1680a3	Feature 02 task 2: Store helpers: transactions, ULIDs and time conventions (#11) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 08:54:55 -04:00
dev_agent	e9ee4e768a	Feature 02 task 1: SQLite connection and embedded migration runner (#10) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-03 00:54:02 -04:00
dev_agent	85569b451f	Feature 01 task 3: Embed the PWA build with SPA fallback (#4) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-02 22:47:01 -04:00
dev_agent	e3d8c4d73d	Feature 01 task 1: Go module, fail-fast config and /health (#2) ... Co-authored-by: dev_agent <dev_agent@cubecraftlabs.com> Co-committed-by: dev_agent <dev_agent@cubecraftlabs.com>	2026-10-02 22:20:34 -04:00