10 Commits

Include renames

Author	SHA1	Message	Date
owain	64caaad4e7	fix: cleanup StravaConfig on user delete (FK violation); equalize login timing (user enum); scope upload task-status to owner; SQL-side data-point downsampling; drop unused clsx/react-leaflet deps	2026-06-25 12:21:25 +01:00
owain	3c97595093	feat: persist map tile settings (provider/style/API keys) server-side on user record; unbake Thunderforest default key into backend config (THUNDERFOREST_DEFAULT_KEY) served via profile	2026-06-23 12:37:27 +01:00
owain	07139120df	feat: Strava support — bulk-export .gz/.tcx import fix + .tcx parser; full Strava API OAuth live sync (activities via streams) with Profile connect UI; colour gym/no-GPS sports red	2026-06-21 10:18:09 +01:00
owainandClaude Opus 4.8	04689a29bd	Cut Garmin sync API volume; dashboard/health/records/UI improvements ... Garmin Connect sync: - Incremental syncs now re-fetch only a 1-day buffer (yesterday + today) instead of the full lookback window every run. Full lookback applies on the first sync only. Cuts steady-state API calls ~10x. - Beat interval is now configurable via GARMIN_SYNC_INTERVAL_MINUTES and surfaced to the UI; the sync toggle is relabelled to the real cadence. Frontend: - Collapsible sidebar; clearer logged-in user + role display. - Unified Body Battery colouring between dashboard and health (shared util). - Sleep score trend chart on health page. - Segments + medals on the dashboard's most-recent activity. - Segments tab on the Records page. Repo hygiene: add .gitignore, untrack committed __pycache__/*.pyc. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-09 11:52:52 +01:00
owainandClaude Opus 4.8	0e4bc7b444	Multi-user via PocketID: account linking, group gating, admin user management ... PocketID OIDC already auto-provisioned users keyed by pocketid_sub, and the data layer was already fully user-scoped. This adds the missing pieces for running real multi-user: - auth.py callback: link by email to an existing un-linked account (so the admin keeps their data when first signing in by passkey), collision-safe username generation, and request the `groups` scope. - Group gating: optional pocketid_allowed_group (admin-config or POCKETID_ALLOWED_GROUP env); users lacking the group are rejected at the callback and redirected to /login?auth_error=not_authorized. - New admin users API (app/api/users.py): list users, promote/demote admin (guards against demoting/locking out the last admin or yourself), and delete a user with ordered bulk deletes of all their data + on-disk files. - ProfilePage: allowed-group field; LoginPage: rejected-login message; Layout: admin-only Users nav; new UsersPage. Resync milevault_export to current source (it had drifted many features behind — missing garmin_sync, npm-ci Dockerfile and @polyline-codec that broke its own CI) and add POCKETID_ALLOWED_GROUP to .env.example. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-08 13:19:55 +01:00
owain	34284f3d9d	Fix PocketID callback URL to use full base URL	2026-06-06 19:43:26 +01:00
owain	ec5a01d12a	All tweaks added	2026-06-06 18:10:35 +01:00
owain	c4e5eb91ed	Use sync SQLAlchemy in Celery worker - fixes asyncpg connection issues	2026-06-06 15:29:36 +01:00
owain	29c39c3bbb	Make admin_password optional so worker can start without it	2026-06-06 15:09:27 +01:00
owain	1a0d45dd67	Initial Commit	2026-06-06 13:23:33 +01:00