CookTrace v1.0.0-rc.3: Shopping Aisles, AI Scan Label, Cook-Mode Wake Fix

[thebigjoe1]

Third release candidate. Shopping list gets aisle grouping, drag reorder, and a simplified add flow. Pantry items gain AI Scan Label for one-shot nutrition capture from a photo. Cook Mode reliably keeps the screen awake on Android. Recipe editor gets a mobile kebab menu on ingredient rows. Multi-select on Pantry and Recipes matches NutriTrace. Dependency security bumps clear every actionable Dependabot alert.

Added

• Shopping List Aisle Grouping. By Aisle / By Recipe / Flat chip row at the top of the list. Every pantry category picks up an optional Default Aisle label; items added from a linked pantry row inherit that aisle automatically.
• Change Aisle Per Item. Long-press a shopping row and pick a known aisle from a chip list or type a fresh label. Custom aisles work as their own groups without any pantry-category setup, write "Freezer" once and it becomes a group.
• Drag to Reorder Shopping Items. Cross-group drops in By Aisle mode reassign the moved item's aisle to match where you dropped it, so shuffling the list is the same gesture as reclassifying an item.
• Hide Checked Items Toggle. New Shopping List section under Settings → Cooking. Choose Sink to Bottom (default) or Hide, with a one-tap "Show N Checked" toggle in the status bar.
• AI Scan Label for Pantry Nutrition. Take a photo of a nutrition label from the pantry item editor and Trace extracts name, brand, serving size, and every nutrient it can read. Complementary to the existing barcode scanner: barcode looks up Open Food Facts for name-brand products, label scan handles store-brand jars, homemade batches, and imports OFF doesn't cover. Requires an AI provider configured in Settings.
• Per-Row Edit on Shopping Rows. Long-press for Edit, Change Aisle, or Delete. Edit opens a modal for name, quantity, and unit.

Changed

• Simplified Shopping Quick-Add. Name plus optional qty plus a labeled Add pill, matching Google Keep, Bring!, AnyList, and OurGroceries. Unit moved to the per-row Edit modal so a "milk, eggs, bread" sweep is name-tap-Add-repeat, not three fields per item.
• Consolidated Bulk-Add into a + Menu. Header shrinks to Share plus a single + button. Tapping + opens an action sheet with Add from Recipe and Add from Planned Cooks, each with a proper label instead of a bare icon.
• "Add from Meal Plan" Renamed to "Add from Planned Cooks". Matches the Diary's language everywhere else.
• Recipe Editor Ingredient Rows on Mobile. The three per-row action buttons (link to pantry, section divider, delete) collapse behind a single kebab menu on small screens so the ingredient name field has room to read. Adding a note is one tap in the kebab; the note appears on a second inline row. Small indicator icons signal what's stashed behind the menu. Desktop layout is unchanged.
• Multi-Select on Pantry and Recipes. Enter selection mode from the long-press menu on any item. The header title flips to "N Selected" and the top-right icons become trash + cancel on Pantry, or trash + add-to-cookbook + cancel on Recipes. Matches NutriTrace's pattern. Replaces the old floating action pill.
• Recipe Editor Landscape on Phone. Ingredients and Steps stay stacked when a phone rotates to landscape. The two-column view only kicks in on tablet-landscape widths and up.

Fixed

• Cook Mode reliably keeps the screen awake on Android via the native KeepAwake plugin. The Web Wake Lock path silently stopped working on some Android WebView versions. PWA continues to use the Web Wake Lock API.
• Cook photos taken during a diary log render immediately on the Diary Photos tab. Older photos still render via a backstop conversion.
• Bulk-add from a recipe or planned cook populates each row's aisle from the linked pantry item's category, so items land pre-grouped instead of piling into Uncategorized.
• Long-pressing a Shopping row no longer lets you drag it while the action menu is open.
• Cancel out of Pantry multi-select no longer leaves an invisible layer blocking taps until reload.
• The Shopping quick-add box no longer freezes on mobile when the pantry has hundreds of items. The suggestion list is now capped.

Security

• Dependency Security Updates. Bumped multer 1.4.5-lts.1 → 2.2.0 (three high-severity DoS CVEs on the LTS line), nodemailer 8.0.7 → 9.0.3 (five CVEs including a TLS OAuth certificate-validation bypass and CRLF header injection), and vite 7.3.3 → 7.3.6 (dev-only, patches a server.fs.deny bypass on Windows). Package overrides pull esbuild forward to ^0.25.0 to clear a dev-server CORS advisory nested under svelte-i18n. Clears every actionable Dependabot alert. Self-hosters on Docker just need to pull the new image.

---

Signed APK on the release page. Docker image is multi-arch (amd64 + arm64):

docker compose pull && docker compose up -d