| Age | Commit message (Collapse) | Author |
|
Include systemd service file, Apache reverse proxy config,
and comprehensive deployment guide for Linux VPS setup.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
|
Allow static file directory to be configured via environment
variable for flexible deployment layouts. Also fix gitignore
to not ignore cmd/dashboard directory.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
|
All critical issues resolved: auth tests, CSRF protection,
and acceptance tests updated. All tests passing.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
|
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
|
Include design system guidelines, Phase 3 roadmap, code quality
review, proposed README, and authentication ADR.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
|
Document completed and planned tasks:
- Obsidian removal (completed)
- Authentication implementation (completed)
- VPS deployment preparation (planned)
- API sync optimization research
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
|
Include tests exploring Todoist Sync API and Trello field
filtering for efficient incremental data fetching.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
|
Include surgical instructions and code review feedback
from authentication feature development.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
|
Define workflow personas for multi-agent development process
with clear responsibilities and handoff protocols.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
|
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
|
Remove inline content and delegate to trello-boards partial.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
|
Track completed authentication work and remaining next steps
for CSRF protection and testing.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
|
Clean up repository by removing outdated planning documents,
implementation specs, and setup guides that are no longer relevant.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
|
Add CSRF token middleware for state-changing request protection,
integrate tokens into templates and HTMX headers, and add unit
tests for authentication service and handlers.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
|
Implement secure authentication using scs session manager with SQLite
backing store and bcrypt password hashing.
- Add users and sessions tables (migration 004)
- Create internal/auth package with Service, Middleware, and Handlers
- Protect all routes except /login, /logout, /static/*
- Add login page template and logout button to dashboard
- Default credentials: admin/changeme (configurable via env vars)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
|
Obsidian relied on local filesystem access which is incompatible with
public server deployment. This removes all Obsidian-related code including:
- API client and interface
- Store layer methods (SaveNotes, GetNotes, SearchNotes)
- Handler methods and routes
- UI tab and templates
- Configuration fields
- Related tests
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
|
- Add Todoist Sync API v9 support with incremental sync tokens
- Store sync tokens in SQLite for persistence across restarts
- Add field filtering to Trello API calls to reduce payload size
- Update handlers to use incremental sync (merge changes vs full replace)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
|
Clear tasks table before inserting fresh API data, matching the fix
applied to SaveBoards. This ensures completed/updated/deleted tasks
are properly removed from the cache.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
|
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
|
Replace manual string concatenation with url.Values for cleaner,
safer query parameter construction in GetBoards, GetCards, and getLists.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
|
Code quality improvements:
- Define CacheKey* constants in store package for type safety
- Add TemplateDir to config (default: web/templates, env: TEMPLATE_DIR)
- Update handlers to use store.CacheKey* instead of hardcoded strings
- Update NewTabsHandler to accept templateDir parameter
- Use filepath.Join for cross-platform template path construction
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
|
Add Quick Add form to create Todoist tasks or Trello cards directly
from the Tasks tab with optional due date support.
Features:
- HandleUnifiedAdd handler with due date parsing
- HandleGetListsOptions for dynamic Trello list loading
- Quick Add form with source toggle (Todoist/Trello)
- Date picker for due dates
- HX-Trigger refresh after successful creation
- Pass boards to tasks-tab template for board selector
Cleanup:
- Remove resolved issue tracking files
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
|
Closed boards were appearing because:
1. API fetched all boards including closed ones
2. Cache used upsert logic that never removed old data
Fixes:
- Add filter=open to GetBoards API call
- Add filter=visible to GetCards API call
- Clear boards/cards tables before inserting fresh data in SaveBoards
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
|
Add checkbox UI to Tasks tab for completing Todoist tasks and archiving
Trello cards. Fix cache synchronization so completed items stay gone
after page reload by deleting them from SQLite cache after API success.
- Add HandleCompleteAtom handler routing to Todoist/Trello APIs
- Add DeleteTask/DeleteCard store methods for cache removal
- Add htmx.process() calls after innerHTML updates in app.js
- Add comprehensive tests for completion and cache behavior
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
|
Add filtering logic to show Trello cards as actionable tasks when they
have due dates OR are in lists named like "todo", "doing", "in progress",
"tasks", "next", or "today". This makes the Tasks tab more useful by
surfacing cards that represent work items even without explicit due dates.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
|
|
|
Make Todoist tasks visible by integrating into Planning tab:
- Add todoist-tasks template to planning-tab.html
- Update HandlePlanning to fetch and pass Tasks data
- Pass empty Projects slice (quick add form won't show initially)
- Completion checkboxes now visible and functional
Tasks with checkboxes now appear on Planning tab above Trello boards.
Users can click checkboxes to complete tasks instantly.
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
|
|
Complete Todoist task creation and completion functionality:
Handlers:
- Update aggregateData to fetch and populate Projects
- Add HandleCreateTask: creates task, refreshes list, re-renders
- Add HandleCompleteTask: marks task complete, returns empty
- Both handlers pass Projects to template for dropdown
Routes:
- Register POST /tasks for task creation
- Register POST /tasks/complete for task completion
UI (todoist-tasks.html):
- Add Quick Add form with collapsible details element
- Project selector dropdown (iterates over .Projects)
- Content input field with validation
- HTMX integration: hx-post, hx-target, hx-swap
- Functional completion checkboxes on each task
- Remove disabled attribute from checkboxes
- Add todoist-task-item wrapper class for HTMX targeting
- Glassmorphism styling for form
Features:
- Create Todoist tasks with optional project assignment
- Mark tasks complete with single click (disappears)
- Real-time task list updates without page reload
- Seamless HTMX partial updates
All tests pass. Full Todoist write operations now live in UI!
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
|
|
Add CreateTask and CompleteTask methods to Todoist API client:
Models:
- Add Project struct (ID, Name) to types.go
- Add Projects []Project field to DashboardData
API Interface:
- Change GetProjects signature to return []models.Project
- Ensure CreateTask and CompleteTask are defined
Todoist Client:
- Add baseURL field for testability
- Refactor GetProjects to return []models.Project
- Update GetTasks to build project map from new GetProjects
- Implement CreateTask with JSON payload support
- Implement CompleteTask using POST to /tasks/{id}/close
Tests:
- Create comprehensive todoist_test.go
- Test CreateTask, CreateTask with due date, CompleteTask
- Test error handling and GetProjects
- Update mock client in handlers tests
All tests pass. Ready for handlers and UI integration.
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
|
|
Implement interactive Trello card management with HTMX:
Frontend:
- Create trello-board.html partial with add card form
- Add collapsible form with list selector and card title input
- Add completion checkbox on each card
- Update trello-boards.html to use new partial
- Use HTMX for seamless partial updates (hx-post, hx-swap)
Backend:
- Add HandleCreateCard: creates card and re-renders board
- Add HandleCompleteCard: marks card as closed
- Register /cards and /cards/complete POST routes
Features:
- Add cards to any list via dropdown
- Mark cards complete with checkbox (removes from view)
- Real-time board updates without full page reload
- Glassmorphism styling for form
All tests pass. Full Trello write operations now available in UI.
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
|
|
Expose Trello Lists in Board model to enable card creation UI:
- Add List model struct (ID, Name) to types.go
- Add Lists []List field to Board model
- Add GetLists method to TrelloAPI interface
- Refactor private getLists to return []models.List
- Update GetCards to build list map from slice
- Add public GetLists method wrapping private implementation
- Update GetBoardsWithCards to populate Lists field concurrently
- Update mock Trello client in tests to implement GetLists
All tests pass. Boards now include their lists for UI rendering.
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
|
|
Add CreateCard and UpdateCard methods to Trello API client with
full testability support:
- Refactor TrelloClient with configurable baseURL for testing
- Replace hardcoded trelloBaseURL constant with c.baseURL
- Implement CreateCard with support for description and due date
- Implement UpdateCard with flexible field updates
- Add comprehensive test suite using httptest.NewServer
- Tests cover success cases, error handling, and edge cases
All tests pass. Write operations ready for Phase 3 UI integration.
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
|
|
Visual overhaul with glassmorphism design system:
- Gradient background (indigo/purple/pink)
- Glass morphic cards with backdrop blur
- Rounded pill navigation with glass effect
- Enhanced shadows and hover states
- Refined scrollbar styling
Changes:
- Update input.css with glassmorphism components and utilities
- Modify index.html navigation to use glass container
- Mark Bug 001 as resolved in tracking docs
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
|
|
Add Errors field to HandleNotes data structure to match notes-tab
template expectations. The error-banner partial requires this field.
- Add template_test.go with reproduction test
- Update HandleNotes to include Errors field in data struct
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
|
|
- bug_001_template_rendering.md: Template error documentation
- bug_002_tab_state.md: Tab state persistence issue (now resolved)
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
|
|
Step 3 - Trello Smart Sorting:
- Update GetBoards SQL with LEFT JOIN and MAX(c.id) for activity sorting
- Update GetBoardsWithCards to find max card ID per board
- Sort by: 1) Has cards, 2) Newest card activity, 3) Board name
- Trello IDs are chronologically sortable (newer > older)
Step 4 - Todoist Due-First Sorting:
- Update GetTasks ORDER BY with CASE WHEN due_date IS NULL
- Sort by: 1) Incomplete, 2) Has due date, 3) Earliest date, 4) Priority
- Tasks with due dates appear before tasks without due dates
Step 5 - Obsidian Search:
- Add SearchNotes method with LIKE queries on title/content
- Update HandleNotes to check 'q' query param and HX-Target header
- Implement smart partial rendering (obsidian-notes vs notes-tab)
- Add search input with 300ms debounce and HTMX integration
- Real-time search without page reload
Mark Steps 1-5 as complete in PHASE_2_SURGICAL_PLAN.md
All tests passing
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
|
|
- Extract tab query param in HandleDashboard, default to "tasks"
- Wrap DashboardData with ActiveTab field for template access
- Update index.html with conditional tab-button-active class
- Add hx-push-url="?tab=..." to each tab button for URL persistence
- Update content div to load active tab from server state
- Update app.js to read currentTab from URL query parameters
- Add comprehensive tab_state_test.go test suite
- Tab selection now persists through page reloads
- All tests passing
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
|
|
- Update GetBoards SQL query with LEFT JOIN and GROUP BY
- Sort by: 1) Has cards, 2) Newest card (MAX ID), 3) Board name
- Update GetBoardsWithCards to match SQL sorting behavior
- Leverage Trello ID chronological sortability (newer > older)
- Active boards with recent activity appear first
- All tests passing
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
|
|
- Create TabsHandler with 4 specialized tab methods
- HandleTasks: Unified Atom view (Todoist + Trello due cards)
- HandlePlanning: Dedicated Trello boards view
- HandleNotes: Obsidian notes view
- HandleMeals: PlanToEat meals view
- Rewrite tasks-tab template for Atom rendering
- Add planning-tab and meals-tab templates
- Update index.html navigation with 4 tabs
- Smart sorting: Tasks sorted by due date then priority
- Clean separation: Tasks (action), Planning (structure), Notes (knowledge), Meals (calendar)
Template fixes:
- Load initial tab content via HTMX to avoid data structure mismatch
- Update refresh logic to use 2-step process (API refresh + tab reload)
- Fix manual and auto-refresh to call tab endpoints directly
Note: Router changes in cmd/dashboard/main.go (untracked file) at lines 55-78
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
|
|
|
|
|
|
- Create internal/models/atom.go with Atom struct and enums
- Add mapper functions for Task, Card, Note, and Meal types
- Normalize priority scales (1-4) and assign brand colors
- Update Phase 2 plan with Atom architecture as Step 1
- Document architectural decision in SESSION_STATE.md
This abstraction enables consistent handling, sorting, and rendering
of items from Trello, Todoist, Obsidian, and PlanToEat sources.
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
|
|
Complete UI overhaul implementing modern design patterns with HTMX for
dynamic updates, proper Tailwind build pipeline, and improved UX.
Build Pipeline:
- Add npm + PostCSS + Tailwind CSS configuration
- Custom design system with brand colors
- Compiled CSS: 27KB (vs 3MB CDN), 99% reduction
- Makefile for unified build commands
- Inter font for improved typography
Tab Interface:
- Separate Tasks tab from Notes tab using HTMX
- Partial page updates without full refreshes
- Tab state management with proper refresh handling
- New endpoints: /tabs/tasks, /tabs/notes, /tabs/refresh
Template Architecture:
- Modular partials system (7 reusable components)
- Cleaner separation of concerns
Empty Board Management:
- Active boards in main 3-column grid
- Empty boards in collapsible section
- Reduces visual clutter
Visual Design Enhancements:
- Inter font, brand color accents
- Improved typography hierarchy and spacing
- Enhanced card styling with hover effects
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
|
|
Improves UX by prioritizing boards with cards over empty boards.
Both API and cached results now sort consistently: non-empty boards
appear first, then empty boards, with alphabetical ordering within
each group.
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
|
|
Created comprehensive test coverage for security fixes:
- internal/api/obsidian_test.go:
* TestGetNotes_SymlinkSecurity: Verifies symlinks are not followed
* TestGetNotes_BasicFunctionality: Tests basic limit and ordering
* Uses t.TempDir() for isolated test environments
- internal/store/sqlite_test.go:
* TestGetNotes_LimitClause: Validates LIMIT parameter handling
* TestGetNotes_EmptyDatabase: Tests empty state
* TestSaveNotes_Upsert: Verifies INSERT OR REPLACE behavior
* TestGetNotes_SQLInjectionAttempt: Confirms parameterized queries
* All tests use temporary SQLite databases for isolation
All tests passing (7 new test cases). Security fixes from commits
325811c and 4c03e9c now have full test coverage.
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
|
|
Cleaned up CLAUDE.md by removing the AI Endpoint line from the
Technical Context section. Updated SESSION_STATE.md to track this
final documentation cleanup.
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
|
|
Simplified the dashboard by removing the AI agent access layer:
- Deleted internal/middleware/ai_auth.go and tests
- Removed AIAgentAPIKey from config.Config
- Removed /api/claude/snapshot endpoint registration
- Updated SESSION_STATE.md and CLAUDE.md documentation
- All tests passing after cleanup
Dashboard is now human-facing only without the AI agent endpoint.
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
|
|
Replaced sequential card fetching in GetBoardsWithCards with concurrent
goroutines limited by a semaphore (max 5 concurrent requests). This
significantly reduces load times for users with multiple boards.
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
|
|
Skip symbolic links during vault traversal to prevent reading files outside the configured vault directory. This prevents potential path traversal attacks via malicious symlinks.
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
|
|
Enable WAL mode for better concurrency, serialize writes to prevent database lock errors, and fix SQL injection vulnerability in GetNotes by using parameterized queries.
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
|