7 Commits

Include renames

Author	SHA1	Message	Date
owain	4d5938cf33	fix(deps): resolve npm audit vulns — form-data 4.0.6 (high CRLF), Vite 5→8 + plugin-react 6 (esbuild dev-server moderate); bump frontend build image to node:22-alpine; mirror to export snapshot	2026-06-25 12:31:17 +01:00
owain	385443522b	frontend nginx: no-cache on index.html so deploys aren't masked by stale SPA shell (Edge heuristic caching)	2026-06-18 12:00:58 +01:00
owainandClaude Opus 4.8	e5feeb1178	Add explicit "link passkey to my account" flow ... Signing in by passkey on a fresh install created a new empty account because the seeded admin has no email to match on. Add canonical SSO-style linking: an authenticated user starts an OIDC flow whose `state` is a signed, short-lived "link to user N" token (purpose=pocketid-link). The callback detects that state and attaches the returned identity to that account instead of creating/matching one — no reliance on emails lining up, and no group gating (the initiator is already authorised; this is identity linking, not access control). - auth.py: _make_link_state/_decode_link_state, GET /pocketid/link-url, callback handles state (rejects if the passkey is already on another account → auth_error=passkey_in_use). Expose has_passkey on /auth/me. - Profile: "Passkey sign-in" section for all users — shows linked state or a "Link a passkey to this account" button; success banner on return. - Login: messages for passkey_in_use / link_failed. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-08 17:11:30 +01:00
owainandClaude Opus 4.8	0e4bc7b444	Multi-user via PocketID: account linking, group gating, admin user management ... PocketID OIDC already auto-provisioned users keyed by pocketid_sub, and the data layer was already fully user-scoped. This adds the missing pieces for running real multi-user: - auth.py callback: link by email to an existing un-linked account (so the admin keeps their data when first signing in by passkey), collision-safe username generation, and request the `groups` scope. - Group gating: optional pocketid_allowed_group (admin-config or POCKETID_ALLOWED_GROUP env); users lacking the group are rejected at the callback and redirected to /login?auth_error=not_authorized. - New admin users API (app/api/users.py): list users, promote/demote admin (guards against demoting/locking out the last admin or yourself), and delete a user with ordered bulk deletes of all their data + on-disk files. - ProfilePage: allowed-group field; LoginPage: rejected-login message; Layout: admin-only Users nav; new UsersPage. Resync milevault_export to current source (it had drifted many features behind — missing garmin_sync, npm-ci Dockerfile and @polyline-codec that broke its own CI) and add POCKETID_ALLOWED_GROUP to .env.example. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-08 13:19:55 +01:00
owainandClaude Sonnet 4.6	13ed824f01	VO2 max carry-forward and sync lookback days fix ... Show the most recently known VO2 max value on days where Garmin has not produced a new estimate (it only updates after certain activities). Fix the sync lookback days input resetting to the server value during polling — the form now initialises from the server once on first load and is not overwritten by background refetches. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-07 20:12:51 +01:00
owain	45ff4c26aa	Implemented all 9 UI fixes across health charts and activity detail pages. Changes are ready to push to git for the Docker build to pick them up.	2026-06-07 19:57:25 +01:00
owain	ec5a01d12a	All tweaks added	2026-06-06 18:10:35 +01:00