v1.3.1 — Bug Fixes & GPL-3.0 License

Bug Fixes

Server

• Nutrition endpoint now returns result — fixed missing res.json()
• /api/auth/me returns 401 instead of crashing 500 when no token
• Meal planner accepts client goal param, passes to AI prompt
• Image-proxy SSRF protection — blocks private/reserved IPs
• Vision model OpenAI path returns JSON — fixes empty fridge scans
• Collections uniqueness scoped per user
• Recipe photo upload: base64 images from camera/gallery now saved to disk

Mobile

• Terry meal plan actions land on correct day
• AI nutrition fallback fixes undefined/zeros
• Local shopping list accepts recipe arrays
• USDA DB staleness check re-copies on version bump
• Offline temp IDs remapped after sync
• Optional Bearer auth header
• Recipe photos: local file:// images converted to base64 before server upload
• HTTP cleartext allowed to any LAN IP (not just hardcoded ones)

License

• Switched MIT → GPL-3.0
• SPDX headers on all 71 source files