v0.9.0 — 📊 City Pulse: AI Situational Summary

📊 City Pulse

Frankfurt Radar now generates an hourly AI-powered situational summary using Gemini 2.5 Flash with extended thinking. Instead of scanning individual alert cards, users get a concise synthesis of what's happening, what's changing, and what to do about it.

✨ Highlights

• Hourly pulse — AI synthesis of all active alerts, displayed as a floating overlay on the map
• Daily digest — 24 hourly pulses compressed into a one-paragraph summary at 23:00, providing multi-day trend context
• Telegram delivery — subscribers choose when to receive the pulse (08:00, 12:00, or 18:00)
• 5 trend categories — Weather ⛈️ · Transport 🚇 · Roadworks 🚧 · Incidents 🚨 · Events 🎉
• 3 trend directions — ↗ worsening · ↘ improving · → stable
• Smart prioritization — new alerts emphasized, old low-severity alerts deprioritized
• Proactive recommendations — suggests alternative routes during disruptions, events during good weather
• Editable prompts — YAML frontmatter + template in prompts/, seeded to data volume
• Admin /pulse command — trigger generation manually via Telegram
• One pulse per hour — dedup prevents history pollution from repeated manual triggers

🔒 Security Audit Remediation (#264–#268)

• Gitleaks allowlist for false positives (+ config format fix)
• SECURITY.md ↔ security.html sync
• Caddyfile subdomain security headers
• BIND_ADDR env var — 127.0.0.1 for production behind Caddy, 0.0.0.0 for self-hosters
• _allow_manual_poll safe default

🐛 Bug Fixes

• Deep link auto-opens cleared section for removed alerts
• SOURCE_URL fallbacks for baustellen/sports/strike + synced officialUrl in popups
• Radar frames re-fetched on each open (stale "now" marker fix)

📝 Documentation

• README: City Pulse feature section + updated architecture diagram
• Architecture, user guide, self-hosting docs updated
• PRIVACY.md + privacy.html: Gemini API data processing disclosure

🚀 Deploy

# Add to .env
BIND_ADDR=127.0.0.1

# Add to data/config.yaml
pulse:
  enabled: true

# Deploy
rm -rf data/prompts
docker compose pull && docker compose up -d