Security Update 1 #59

Merged

Lars merged 6 commits from develop into main 2026-10-13 17:38:10 +02:00

Conversation 0 Commits 6 Files Changed 72 +4634 -358

Lars commented 2026-10-13 17:38:04 +02:00

Owner

Copy Link

No description provided.

Lars added 6 commits 2026-10-13 17:38:04 +02:00

Enhance Planning AI Context with Catalog Exercise Hints ... 3181cc126d

- Introduced support for catalog exercise hints in various functions, including `_build_stage_ai_context`, `try_suggest_ai_stage_step`, and `build_gap_fill_goal_text`, improving the contextual information available for AI suggestions.
- Added a new function `catalog_exercise_hints_block` to consolidate hints retrieval from the catalog context.
- Updated the `PlanningIntentContext` to include catalog exercise hints, ensuring they are part of the API output.
- Implemented tests to verify the inclusion of catalog exercise hints in goal text generation and rematch logic.
- Incremented version numbers and updated changelog to reflect these enhancements.

Add Jinkendo family design principles and entitlement model docs. ... 6c7c24e887

Document cross-app architecture patterns, Mitai alignment, and family entitlement standards. Documentation only; no runtime changes.

Co-authored-by: Cursor <cursoragent@cursor.com>

Harden login, sessions, and media access before the dev deploy. ... 32b28a93f3

Limit brute-force attempts, require admin TOTP, and keep session tokens out of media URLs.

Co-authored-by: Cursor <cursoragent@cursor.com>

Keep recovery codes on screen and make two-factor optional. ... 2e22a7c8e0

Admins can replace missed codes or turn two-factor off without a forced enrollment on every login.

Co-authored-by: Cursor <cursoragent@cursor.com>

Show a scannable QR code when setting up two-factor authentication. ... 5ea225ec6b

Co-authored-by: Cursor <cursoragent@cursor.com>

Close medium exposure on reports, registration, uploads, and exercise HTML. ... f10c28e5cd

A superadmin can also turn off another account''s two-factor when the authenticator is lost.

Co-authored-by: Cursor <cursoragent@cursor.com>

Lars merged commit 4e5a7b466f into main 2026-10-13 17:38:10 +02:00

Lars referenced this issue from a commit 2026-10-13 17:38:12 +02:00

Merge pull request 'Security Update 1' (#59) from develop into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No Label

Milestone

Clear milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

No Assignees

1 Participants

Notifications

Subscribe

Due Date

The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: Lars/shinkan-jinkendo#59

No description provided.