dev_agentandClaude Opus 5.5 c15c8ec284 Keep recipe_url out of dinner responses (Feature 12 review F1) ...

A pasted recipe link may carry a personal token in its query, and the
dinners API returned it from create, list, get, patch and ground, where
other household clients and the PWA's cache of dinner reads could keep
it. Drop recipe_url from the public Dinner shape so it stays in the
database for grounding and dedupe only.

TestCreateDinnerByURL and TestCreateDinnerByName now assert the field is
absent; TestDinnerResponsesHideRecipeURL creates a Regular from a
token-bearing link and checks neither the create nor the list response
holds the link, host or token while the stored link remains.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-06 20:35:19 -04:00

..

aisettings_test.go

Dinners API for Regulars (#89)

2026-10-06 15:57:13 -04:00

aisettings.go

Feature 11: Settings home and Admin AI assistant (#86)

2026-10-06 12:45:05 -04:00

csrf_test.go

Feature 04 task 3 (rebased): Household settings seeding and API (#27)

2026-10-03 11:50:15 -04:00

csrf.go

Feature 03 integration fix: sanitize discovery errors and narrow CSRF exemption (#25)

2026-10-03 11:22:53 -04:00

dinners_test.go

Keep recipe_url out of dinner responses (Feature 12 review F1)

2026-10-06 20:35:19 -04:00

dinners.go

Integration fix 2: conditional recipe repairs and no pasted links in logs (Feature 12 review F1, F2) (#96)

2026-10-06 20:26:56 -04:00

grounding_test.go

Integration fix 2: conditional recipe repairs and no pasted links in logs (Feature 12 review F1, F2) (#96)

2026-10-06 20:26:56 -04:00

jobs_test.go

Feature 04 integration fix: authenticated job enqueue API and progressive HTTP flow (#31)

2026-10-03 15:46:19 -04:00

jobs.go

Feature 04 integration fix: authenticated job enqueue API and progressive HTTP flow (#31)

2026-10-03 15:46:19 -04:00

login_test.go

Dinners API for Regulars (#89)

2026-10-06 15:57:13 -04:00

me.go

Feature 03 task 4: CSRF protection and GET /api/v1/me (#22)

2026-10-03 10:51:26 -04:00

media_test.go

Dinners API for Regulars (#89)

2026-10-06 15:57:13 -04:00

media.go

Feature 10: Recipe grounding and photos (#78)

2026-10-06 07:27:58 -04:00

origin_test.go

Dinners API for Regulars (#89)

2026-10-06 15:57:13 -04:00

origin.go

Feature 03 task 5: Trusted proxy handling for forwarded headers (#23)

2026-10-03 11:05:33 -04:00

recipesearch_test.go

Dinners API for Regulars (#89)

2026-10-06 15:57:13 -04:00

recipesearch.go

Feature 10: Recipe grounding and photos (#78)

2026-10-06 07:27:58 -04:00

server_test.go

Background grounding and recipe fix-up API (#90)

2026-10-06 16:39:10 -04:00

server.go

Background grounding and recipe fix-up API (#90)

2026-10-06 16:39:10 -04:00

session_test.go

Feature 03 task 4: CSRF protection and GET /api/v1/me (#22)

2026-10-03 10:51:26 -04:00

session.go

Feature 03 task 4: CSRF protection and GET /api/v1/me (#22)

2026-10-03 10:51:26 -04:00

settings_test.go

Fix stale Regular grounding and enforce three Regulars for onboarding

2026-10-06 18:47:41 -04:00

settings.go

Onboarding step 3 shell (#92)

2026-10-06 17:57:25 -04:00