4 Commits

Include renames

Author	SHA1	Message	Date
sandrodachandClaude Opus 5.5	4c26eb2960	feat(workspace): link previews above bullets with a web address (M5) ... - GET /link-preview?url= fetches the page on the server (https only, SSRF-guarded like webhooks), reads Open Graph/Twitter tags, title, description and icon from the head, loads picture and icon (no SVG) and keeps them in link_previews (migration 6) for 7 days; readers' browsers never contact the page. Off in the demo; 300 fetches per address in 15 minutes. - Compact card above the bullet (icon, site, title, one line, small picture); the duplicate link badge is left out. - ✕ turns the address into [title](url), so hiding syncs with the note; "Link-Vorschauen anzeigen" under appearance switches all off per device. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-30 00:06:05 +01:00
sandrodachandClaude Opus 5.5	177fa49363	feat(media): storage for images and audio in notes (M1) ... - Table media (migration 5), files in $DATA_DIR/media/<docId>/. - POST /documents/{id}/media (write access), POST .../media/fetch copies an external https image (SSRF-guarded, not in the demo), GET /media/{id} with range requests for readers of a note that shows the file. - Format detected from the content (no SVG); own sandbox CSP on answers. - Blocks point to files through their content (media:<id>), so the note sync needs no change; compaction removes files no block mentions any more after a day. Demo reset and demo start clear the folder. - Limits MEDIA_MAX_IMAGE_MB, MEDIA_MAX_AUDIO_MB, MEDIA_QUOTA_MB, MEDIA_DEMO_MAX_MB. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-29 22:57:59 +01:00
sandrodachandClaude Opus 5.5	1af3a6e90a	feat(auth): server-side sessions and current password for account changes (FLAW-30, FLAW-31) ... - Every login is a session (device, IP, last use); the token's jti is its ID. Sessions end on logout, per device from the profile, or after 30 idle days. - Tokens older than a day are renewed via the X-Session-Token header. - Changing password or login e-mail needs the current password; a new password logs out all other devices and mails the old address. - Demo reset keeps the demo visitors' sessions. - revoked_tokens is replaced by sessions (migration 4); everyone is logged out once after the upgrade. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-29 19:25:22 +01:00
sandrodachandClaude Opus 5.5	dc44f8250c	fix(db): numbered migrations that run once and fail loudly (FLAW-13) ... schema_migrations records every applied step; the former migrate() is step 3, the baseline that builds the v0.4.1 schema and repairs older databases. Columns are only added when missing, so every other error now stops the start with a clear message instead of being swallowed, and the cleanup statements no longer run on each start. migrations/001_init.sql was never read and is gone. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-29 14:49:35 +01:00