3 Commits

Include renames

Author	SHA1	Message	Date
Juan Denis	6296887bad	Remove internal plan citations from app code ... Comments, docstrings and a few strings cited plan numbers ("plan 29 #9", "plan 86 §B2") from a git-ignored folder, so they pointed at nothing; one reached users in a bottleneck hint. Code and frontend strings are unchanged apart from those citations (checked by AST and token comparison). A vhost still carrying the old asset comment reads as undrifted, and a guard test keeps new citations out.	2026-10-10 15:50:45 -04:00
Juan DenisandClaude Fable 5	4919ff1cfe	refactor(models): TimestampMixin + uuid_pk() one-door shapes (plan 77 B1/B3) ... TimestampMixin (byte-identical to the hand-written pair — zero schema migrations) adopted by 52 classes across 44 model files; the utcnow tz-aware migration is now a one-file edit. uuid_pk() replaces the 13 pasted String(36) uuid4 lambdas across 7 files (ai.py's hex variant stays grandfathered, documented). Deviant shapes (indexed created_at, sanitization_profile's default-less updated_at, created-only models) deliberately keep their own columns. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-08-19 01:59:10 -04:00
Juan DenisandClaude Opus 4.8	c20a9f14f2	feat(themes): backend model, API, and registry pipeline (plan 60 Phase 2-3) ... Themes are data, not code — so the backend is a simple validated-JSON store, no zips/checksums/permissions. - Theme model + migration 078_themes - theme_tokens.py: server-side mirror of the token whitelist + validators (the gate: a malicious/malformed theme never reaches the DB) - theme_service: bundled-seed loading, import/list/delete, panel default, pre-auth public/active - /api/v1/themes: /installed, /import (admin), DELETE (admin), /default get+set (admin), unauthenticated /public/active for login/setup, plus /registry + /registry/<slug>/install - theme_registry_service: offline-tolerant registry fetch (TTL + last-good + bundled fallback), mirrors the extension registry pattern - bundled seed themes synced to app/data/themes + themes_index.json - 18 proving tests (server-side validation sanitizes url()/;/} smuggling, admin gate, panel-default → public/active, offline fallback, install flow) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-23 00:24:00 -04:00