531 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Daniel	82ed46d01b	Fix Turnstile in the mobile app; drop it from login ... The Turnstile challenge failed reliably inside the Capacitor WebView, which blocked login and registration from the Android app. Three separate causes: 1. Android WebView blocks third-party cookies by default. Turnstile runs in a cross-origin iframe from challenges.cloudflare.com and needs its own storage, so the widget never emitted a token. MainActivity now calls setAcceptThirdPartyCookies on the app's own WebView. 2. The register handler read the Turnstile response with an unscoped document.querySelector, which matched the *login* widget's input (it comes first in the DOM). Registration therefore submitted the login widget's token — single-use with a 5 minute expiry, so any prior login attempt or slow signup made it fail server-side. 3. The register and forgot-password widgets auto-rendered inside forms that start at display:none, where Turnstile does not reliably complete a challenge, and nothing re-rendered them when the form was shown. Widgets are now rendered explicitly when their form first becomes visible, and tokens are captured from the render callback instead of being read back out of the injected input — which makes the unscoped lookup in (2) structurally impossible. Added error/expired/timeout callbacks so a widget failure surfaces the Cloudflare error code instead of failing silently behind a generic toast. Login is no longer gated at all. It is the path mobile users hit constantly, and it is already covered by a 10-per-15-min per-IP rate limit, a constant-time credential check, and TOTP 2FA. Registration and password reset — the endpoints that actually attract bots — stay gated. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-07-30 17:22:03 +02:00
Daniel	bee9361c1d	Fix authenticated mobile image downloads	2026-06-09 16:02:11 +02:00
Daniel	2ca969e099	Fix generated image mobile downloads	2026-06-09 15:20:06 +02:00
Daniel	80139d9a82	Prevent mobile image download preview fallback	2026-06-09 03:11:35 +02:00
Daniel	f7cfc6695d	Fix clinical assistant image downloads	2026-06-08 22:15:34 +02:00
Daniel	b0e1f4969a	feat: improve clinical assistant prompts	2026-06-06 00:01:07 +02:00
Daniel	d02b9e2771	Fix clinical prompt pool fallback seeding	2026-05-22 16:53:53 +02:00
Daniel	c7921ab822	Release v7.14.9	2026-05-22 06:06:43 +02:00
Daniel	fb3e4d4135	Update deployment networks	2026-05-22 05:59:48 +02:00
Daniel	cb63729656	Expand clinical prompt pool taxonomy	2026-05-22 05:56:08 +02:00
Daniel	2cef65fb1f	Fix mobile assistant image downloads	2026-05-13 16:07:41 +02:00
Daniel	629dea808e	Fix assistant cancel button visibility	2026-05-12 16:20:10 +02:00
Daniel	8dca18292a	fix assistant cancel hidden state	2026-05-11 18:05:03 +02:00
Daniel	1f5e4aabac	fix assistant cancel visibility	2026-05-11 17:53:54 +02:00
Daniel	97ddd87449	fix mobile assistant table streaming	2026-05-11 16:15:45 +02:00
Daniel	e1266c6d38	ci: route Android APK through Forgejo releases	2026-05-11 04:21:15 +02:00
Daniel	6e8fae72e7	fix mobile image save to photos	2026-05-11 01:28:43 +02:00
Daniel	2c287bd1b3	fix mobile export save actions	2026-05-10 23:56:51 +02:00
Daniel	f871384063	fix mobile assistant export and image actions	2026-05-10 20:28:46 +02:00
Daniel	977ebfc037	ci: publish forgejo apk releases	2026-05-10 19:37:52 +02:00
Daniel	212ce7dd95	ci: use forgejo-compatible artifact upload	2026-05-10 18:48:40 +02:00
Daniel	b29c6f7717	ci: harden forgejo android signing restore	2026-05-10 18:31:57 +02:00
Daniel	8f51e56723	ci: fetch android setup actions from github	2026-05-10 18:24:12 +02:00
Daniel	7fe0a0e7ec	ci: prepare compose env files in forgejo	2026-05-10 18:21:18 +02:00
Daniel	71655aa7e9	ci: use forgejo local runner label	2026-05-10 18:13:14 +02:00
Daniel	f01ca5a094	ci: scope github release workflows	2026-05-10 18:07:52 +02:00
Daniel	52544e9116	ci: add forgejo build workflows	2026-05-10 18:05:55 +02:00
Daniel	046b07a84a	fix clinical assistant mobile exports	2026-05-10 17:23:54 +02:00
Daniel	cddc1a4d79	document architecture and harden rendering	2026-05-10 01:07:56 +02:00
Daniel	a176e1b014	protect code blocks during citation repair	2026-05-09 20:54:05 +02:00
Daniel	83d9a77160	fix table source citation links	2026-05-09 20:50:54 +02:00
Daniel	baf0020981	prefer file names for clinical sources	2026-05-09 20:10:24 +02:00
Daniel	795ad9ffae	harden clinical assistant source handling	2026-05-09 19:59:04 +02:00
Daniel	8d69fe57a5	fix litellm metadata discovery auth	2026-05-09 15:15:47 +02:00
Daniel	90cdf17bd9	fix litellm capability discovery	2026-05-09 15:06:28 +02:00
Daniel	1b3ea569b7	simplify speech and embeddings through litellm	2026-05-09 05:09:02 +02:00
Daniel	79037fa775	fix litellm tts search fallbacks	2026-05-09 04:50:55 +02:00
Daniel	2a3631d067	fix litellm metadata model discovery	2026-05-09 04:46:06 +02:00
Daniel	ea12b9a46f	chore add pull request template	2026-05-09 04:12:57 +02:00
Daniel	2387e6f136	fix litellm speech model discovery	2026-05-09 04:12:57 +02:00
Daniel	39d77116ac	docs remove stale extended guide	2026-05-09 04:08:27 +02:00
Daniel	6f5782734f	fix stt local model defaults	2026-05-09 01:57:37 +02:00
Daniel	bb31c6f515	test docs toc links	2026-05-09 01:33:06 +02:00
Daniel	113f004230	docs refresh current workflows	2026-05-09 00:40:45 +02:00
Daniel	05f8b00401	docs align memory and audio backup behavior	2026-05-08 23:32:39 +02:00
Daniel	0503a25d0b	fix docs toc fallback and remove redundant iifes	2026-05-08 23:08:47 +02:00
Daniel	e84f19b5cb	fix docs reader anchor navigation	2026-05-08 22:56:03 +02:00
Daniel	493a1d230c	fix docs table of contents scrolling	2026-05-08 22:41:47 +02:00
github-actions[bot]	d108bdc091	Release v7.14.0	2026-05-08 20:27:26 +00:00
Daniel	416fff624a	feat: add patient education handouts	2026-05-08 22:26:53 +02:00