Skip to content

release: v1.0.2 (docs site, backup fidelity, AI provider fixes) - #20

Merged
thebigjoe1 merged 47 commits into
mainfrom
dev
Jul 28, 2026
Merged

release: v1.0.2 (docs site, backup fidelity, AI provider fixes)#20
thebigjoe1 merged 47 commits into
mainfrom
dev

Conversation

@thebigjoe1

Copy link
Copy Markdown
Contributor

Summary

CookTrace v1.0.2. Second stable release. Focuses on gaps that only surface at edge times: a backup you actually restore, an AI provider that just retired your model, an oai-compat endpoint you point at LM Studio. Plus a proper documentation site.

Highlights

  • Unified docs site at traceapps.github.io/docs/ covering all three TraceApps siblings + shared infrastructure.
  • Backup fidelity restored. 12 tables that were silently missing from the JSON export are now captured; kitchen-share restore-ordering bug fixed.
  • AI provider fixes. Current Gemini default + auto-remap of retired IDs, GPT-5.6 chat parameters, oai-compat vision requests.

Full breakdown in CHANGELOG.md.

Test plan

  • Version bumps applied (package.json, src/lib/version.js, android/app/build.gradle)
  • CHANGELOG updated
  • Security sweep clean (0 open Dependabot alerts, npm audit 0 vulns)
  • Build passes locally (Vite + Gradle release)
  • dev-latest APK already refreshed with the same commit set testers have been using it since 03:41 UTC

…d providers

Claude preset bumped to Sonnet 5 + Opus 4.8 (removed retired 4.7/4.6).
Gemini bumped to 2.5 range (with retirement remap for saved 1.5/2.0 IDs
so existing users don't hit 404s). All three branded providers now expose
a 'Custom…' option that reveals a free-text model-ID input, so users
aren't stuck when a vendor retires a hardcoded ID.
…P timeout

Mirrors NutriTrace #110 fix into CookTrace. Fresh-install Android on
an OIDC-only CookTrace server (Authentik / Keycloak / Authelia with
password login disabled) now completes setup, and the first-attempt
spurious 'callback_failed' error from openid-client's 3.5s default
HTTP timeout is gone.

- NativeSetup.svelte: two-step flow (server-url → server-auth). URL
  entered first, then /api/auth/status fetched to render whichever
  auth methods the server supports. OIDC branch persists serverUrl +
  nativeMode + setupComplete BEFORE opening the browser so the deep-
  link callback can complete cleanly.
- App.svelte: re-evaluate showNativeSetup after OIDC callback so the
  user isn't stuck on setup after successful sign-in.
- server/lib/oidc.js: bump openid-client outgoing HTTP timeout from
  3500ms default to 10000ms via custom.setHttpOptionsDefaults.
Adds env-var control of the 'Allow Password Login' setting so operators
can declare SSO-only mode via docker-compose without needing to toggle
it in the admin UI post-deploy. Cross-app fix mirrored from NutriTrace
(originally requested on LT #16).

- server/lib/oidc-env.js: seed enable_email_password_login from
  OIDC_ENABLE_EMAIL_PASSWORD_LOGIN at boot (1|true|yes|on to enable,
  0|false|no|off to disable, unset = admin UI keeps control). Exports
  isPasswordLoginEnvLocked() for admin API + client env-locks endpoint.
- server/routes/oidc-admin.js: PUT /password-login returns 403 when
  env-locked.
- server/routes/app-config.js: expose oidc_password_login_locked flag.
- src/components/settings/SettingsAuth.svelte: gray the Allow Password
  Login toggle + show env-lock hint when locked.
- README + oidc-env.js docblock: document the new env var.
@thebigjoe1
thebigjoe1 merged commit 974af54 into main Jul 28, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant